4 ms·
How will they keep the private keys secret?
by leereeves 3y ago
How will they keep the private keys secret?
- Retr0id 3y agoThey can't, ultimately, it's basically just DRM but in reverse. I'm sure they can make it hard, with secure silicon etc., but they'll never make it impossible and that somewhat defeats the purpose.
- dist-epoch 3y agoThe private keys in credit cards (the ones with chips) are pretty secure. I'm no aware of them being extractable.
- Retr0id 3y agoI'm sure they're not extractable at scale, otherwise we'd have heard about it, but they're almost certainly extractable on a one-off basis if you have a big enough budget (one that likely outweighs whatever you'd stand to gain from it). It's just not the low hanging fruit of the system as a whole. I also expect it not to be the low-hanging fruit of these cameras, but it is still one possible attack vector.
- yrxuthst 3y agoIt still serves a legal purpose, as long as it's difficult enough. If you need to physically modify the device to access the keys, then bringing the unmodified device to court should be enough to verify legitimacy of the signature.
- Retr0id 3y agoSince when are we taking photojournalists and social media users to court to verify each image?
- dist-epoch 3y agoWith homomorphic encryption you can make them provably unextractable.
- deleted 3y ago[deleted]
- Retr0id 3y agoIf you have a black box that signs things, the information required to make it sign arbitrary things is always going to be extractable, one way or another. PUFs attempt to prevent this, but I'm not sure it's been done in a provably secure way yet https://en.wikipedia.org/wiki/Physical_unclonable_function https://en.wikipedia.org/wiki/Physical_unclonable_function