3 ms·
Do they offer a good solution to the dual problem of: - if you can flash/read everything, so can an attacker - if you have a blackbox nothing can peer into, h
by rincebrain 8y ago
Do they offer a good solution to the dual problem of:
- if you can flash/read everything, so can an attacker
- if you have a blackbox nothing can peer into, how can you trust the device?
- oarsinsync 8y agoIt looks like the very first FAQ answers that: 1) You generate your own root keys, to deploy onto the device, 2) You can't read the root keys back off the device once it's deployed.
- rincebrain 8y agoThat doesn't quite answer my question, I think. My statement was that: - if you have an opaque enclave on the device (e.g. a black box you can't peer into), you can't know what it's doing - if you don't, you can read the private key bits out Your statement was that it has a private enclave you cannot extract key material out of, which resolves the latter half of the question, but not the former, I think?