3 ms·
> The hardware manufacturer can destroy the private key after it is placed on the device. By doing so, the private key is inaccessible! I'm pretty sure the pri
by lionkor 3y ago
> The hardware manufacturer can destroy the private key after it is placed on the device. By doing so, the private key is inaccessible!
I'm pretty sure the private key is very accessible, if it's used at runtime which it is. Just not easily.
- flangola7 3y agoExtracting the private key out of a modern HSM enclave is essentially impossible for anything less than NSA-level capabilities.
- didntcheck 3y agoYeah. People have been hoping for a signed "Photoshop-proof camera" since digital image manipulation was invented, but it has the same limitations as any form of DRM. It only slows people down a bit. There's also the analog hole - i.e. just stick your "attested" microphone in front of a speaker
- lionkor 3y agoor rip out the wires and attach whatever speaker you want, not really detectable
- flangola7 3y agoIt is detectable if the other components are cryptographically paired, like they are in newer iPhones. Go try to swap a camera or screen between two identical iPhone models, it won't work.
- kj4ips 3y agoCanon tried to do this with their ODD system, and they got kinda close, but it is possible to extract the key from a given camera, and forge signatures. Their verification system also seems to include a smartcard or SD card-like thing (which might be doing something special, or might just be DRM)