Having a look at their documented threat model: https://github.com/tillitis/tillitis-key1/blob/main/doc/threat_model/threat_model.md https://github.com/tillitis

Having a look at their documented threat model: https://github.com/tillitis/tillitis-key1/blob/main/doc/threat_model/threat_model.md https://github.com/tillitis/tillitis-key1/blob/main/doc/thre... I love this particular detail, listed under Assumptions: > The end user is not an attacker. The end user at least doesn't knowingly aid the attacker in attacks on their device. I love this, it's exactly what I want from a HSM device. However, sadly, most vendors today deploy TPMs in such a way that the end-user is an attacker (see: Google SafetyNet) - and the TKey is kinda incompatible with that, I suppose.