> But you can't guarantee that the security won't be broken in 30 years Yes, you can. Easily, relative to what you already need to protect against physical tam

> But you can't guarantee that the security won't be broken in 30 years Yes, you can. Easily, relative to what you already need to protect against physical tampering today. Include a real time clock, and a comparator that, after 29 years, sets off the anti-tampering magnesium/thermite/whatever charge to destroy your data storage. In fact, you probably don't even need the comparator as such; just use a carry bit from the RTC. Guaranteeing that the security won't be broken in less than 30 years (really, less than X years for whatever X you set the self-destruct to) is the hard part.