3 ms·
There's no way this would work, either the master encryption key would be leaked, or someone would reverse-engineer the chip. Also, what about someone putting
by vhcr 3y ago
There's no way this would work, either the master encryption key would be leaked, or someone would reverse-engineer the chip.
Also, what about someone putting a screen just in front of the sensor?
- nine_k 3y agoNo need for that. A private key is generated on device and never leaves it. It sits inside a TPM or equivalent. The public key is pushed to a well-known site, visible to all. Every shot is signed by hashing the bits into a reasonably short string (say, using sha512) and then encrypted with the private key. Anyone can now decrypt the hash, and compare it with the hash they computed from the bits. The problem, of course, is that any transformation whatsoever breaks the signature. You can't adjust levels and contrast, you can't even crop. Maybe it's a good property.
- vhcr 3y agoWhy would you trust the key if it was generated on the device? Anyone could generate a key. You would either need a centralized server to sign that key, in which case you have to trust a centralized company / government agency.