3 ms·
It looks like the very first FAQ answers that: 1) You generate your own root keys, to deploy onto the device, 2) You can't read the root keys back off the dev
by oarsinsync 8y ago
It looks like the very first FAQ answers that:
1) You generate your own root keys, to deploy onto the device,
2) You can't read the root keys back off the device once it's deployed.
- rincebrain 8y agoThat doesn't quite answer my question, I think. My statement was that: - if you have an opaque enclave on the device (e.g. a black box you can't peer into), you can't know what it's doing - if you don't, you can read the private key bits out Your statement was that it has a private enclave you cannot extract key material out of, which resolves the latter half of the question, but not the former, I think?