3 ms·
That's an example of why you should use public key cryptography for loading data from untrusted source. AES is symmetric which means any encrypted payload need
by ilyt 4y ago
That's an example of why you should use public key cryptography for loading data from untrusted source.
AES is symmetric which means any encrypted payload need key used for encryption for decryption.
Which means it is on device, just need to dump it. And you can now use same key to encode new firmware
- jimktrains2 4y agoHow does that help in this scenario? The need for the unencrypted data necessitates the decryption key on device. Putting it in accessible software rather than a tpm is the problem here. That said, I own the item and I should be able to do what I want with it without technology trying to limit me artificially.
- viceroyalbean 4y agoIf it were encrypted with a private key the device would only have a public key and you wouldn't be able to encrypt your own version of the software.