4 ms·
Couldn't you have something like: key = hash(hardware serial number, user password) And then store the key only in memory every time the user unlocks the phon
by FaceKicker 15y ago
Couldn't you have something like:
key = hash(hardware serial number, user password)
And then store the key only in memory every time the user unlocks the phone and wipe it from memory when they lock their phone?
- daeken 15y agoYep, that's pretty much it. Where 'hash' is PBKDF2 with a good HMAC function and 10k+ rounds.
- ENOTTY 15y agoIf you do that, I'd imagine that the phone would not be able to pull updates from those services while the phone is locked.
- FaceKicker 15y agoDamn, good point. I'm out of ideas then. :)
- IgorPartola 15y agoUnless it is a dumb protocol, you should be fine. Session IDs FTW.
- mentat 15y agoIf you're a registered Apple developer, it's worth watching how they're dealing with this in iOS 5.