3 ms·
> I believe that L2 would be weaker than L3 in practice How come?
by calgarymicro 4y ago
> I believe that L2 would be weaker than L3 in practice
How come?
- Retr0id 4y agoAccording to the descriptions I can find, L2 does cryptography in secure hardware, but video decoding in software. (as opposed to L3 that does both in software, and L1 that does both in hardware). In L3, you can obfuscate the cryptography and the video codecs together as a unit, blurring any defined border between them. A determined reverse-engineer can inevitably unravel that obfuscation, but it's non-trivial. In L2, there must be some interface between the hardware and software components. That interface presents itself as a very obvious weak point. As an attacker, all you'd have to do is watch the data flowing out of the cryptography hardware, and into the video decoder software, and you'd be able to siphon out the plaintext video data. (To be clear, this is entirely "in theory" because I've never seen an L2 implementation)