3 ms·
There are also things like TRESOR [1] which keep all encryption keys inside the CPU. I'm not sure what the current state of the art is. There are so many possi
by captainmuon 6y ago
There are also things like TRESOR [1] which keep all encryption keys inside the CPU. I'm not sure what the current state of the art is.
There are so many possible evil maid attacks that I think it would be useful to add a pysical layer, just in case.
[1] https://en.wikipedia.org/wiki/TRESOR https://en.wikipedia.org/wiki/TRESOR
- _kbh_ 6y agoTRESOR is a great project but pretty seperate to SME imo. TESOR implements SME but its implemented effectively in software, making it less secure and a lot slower. The great thing about SME on AMD CPUs is that I believe (at least on the newer Zen cores) it effectively can run at the speed of the memory, so you have no performance loss.