4 ms·
An active component like the T2 can ensure the keys are erased after N failed attempts. A passive encryption key cannot. There are indeed also disadvantages to
by fmajid 6y ago
An active component like the T2 can ensure the keys are erased after N failed attempts. A passive encryption key cannot. There are indeed also disadvantages to this.
- grishka 6y agoBut then you are encouraged to circumvent this by making backups.
- fomine3 6y agoSimilarly on PC, TPM lockout for decrypt PIN after some tries, then BitLocker requires user to input very long generated passphrase (virtually unbreakable, same as Apple's internal key). They can also export encryption key. Of course exported key must be stored to secure place.