4 ms·
I really wish smart phone display chipsets had this blit overlay functionality for TOTP (including a per-device symmetric encryption key for importing/exporting
by KMag 3y ago
I really wish smart phone display chipsets had this blit overlay functionality for TOTP (including a per-device symmetric encryption key for importing/exporting TOTP secrets such that the main processor can deny itself future access to the secret, but the phone can still generate TOTP codes, without the TOTP processor needing to store all of the secrets itself).
We've seen multiple secure enclave exploits. It's too bad some of this security functionality isn't baked into the display chipset. Yes, it's probably ugly (even if the chipset allows some forms of theming the TOTP code display), but it's better than having your brokerage account, your work login, etc. all exploited due to some 0day. It's also better than carrying around a handful of RSA physical tokens on your keychain (modulo phone breaking/being stolen/running out of battery).