2 ms·
Even if we assume a proper protocol is in place (secrets remain in the HSM which is doing secure computation), the problem of trusting the hardware remains: how
by franky47 4y ago
Even if we assume a proper protocol is in place (secrets remain in the HSM which is doing secure computation), the problem of trusting the hardware remains: how do we know a three letter agency isn't tampering with the HSM hardware assembly process to influence the keys being fused into it?
- quesomaster9000 4y agoI don't necessarily care about the lettered agencies tampering with or backdooring hardware during the manufacturing process because there's nothing I can do about it, but when the best encryption manufacturers have to offer can be defeated by an average CS student with a <$1000 logic analyzer it shows a concerning defect in the process. This line of thinking makes me want to give up, buy a cottage in the woods, adopt 20 cats, burn all my computers and start trading artisanal pottery at the local farmers market.