3 ms·

Need: - photo/video - root of trust definition (TPM? OpenTitan?) - firmware and OS description - specs There's an edge device family from AWS, with sp

Need: - photo/video - root of trust definition (TPM? OpenTitan?) - firmware and OS description - specs There's an edge device family from AWS, with specs and photos, https://aws.amazon.com/blogs/aws/introducing-aws-snowcone-small-lightweight-edge-storage-and-processing/ https://aws.amazon.com/blogs/aws/introducing-aws-snowcone-sm... > AWS Snow Family of physical edge computing, edge storage, and data transfer devices for rugged or disconnected environments.. can be used in a variety of environments including desktops, data centers, messenger bags, vehicles, and in conjunction with drones.. enclosure is both tamper-evident and tamper-resistant, and also uses a Trusted Platform Module (TPM) designed to ensure both security and full chain-of-custody for your data. The device encrypts data at rest and in transit using keys that are managed by AWS Key Management Service (AWS KMS) and are never stored on the device.. use Snowcone for data migration, content distribution, tactical edge computing, healthcare IoT, industrial IoT, transportation, logistics, and autonomous vehicle use cases. AWS Snowball hardware, https://youtube.com/watch?v=BIx9bbe58K8 https://youtube.com/watch?v=BIx9bbe58K8 GDC video of users and control panels, no hardware, https://youtube.com/watch?v=i5fCfgNaPE0 https://youtube.com/watch?v=i5fCfgNaPE0 With hardware expertise from servers, OpenCompute, Project Ara, Chromebooks, Pixels and TPUs, hopefully this appliance is more than a PC OEM whitebox.

01HNNWZ0MV43FF 2y ago
> The device encrypts data... using keys that are... never stored on the device.. Incredible!
- cyberax 2y ago
  Not really. They can just use a public key to encrypt ephemeral symmetric keys. The private key is stored inside AWS and is never exposed to the device.
  - 01HNNWZ0MV43FF 2y ago
    I guess that makes sense. So it's like a ballot box you can drop data into but only Amazon can pull it back out. Still a bit misleading. The public key is on the device (which is fine) and that's the key it uses to encrypt the data (if we consider the symmetric key as just a performance optimization)

01HNNWZ0MV43FF 2y ago

> The device encrypts data... using keys that are... never stored on the device.. Incredible!

cyberax 2y ago
Not really. They can just use a public key to encrypt ephemeral symmetric keys. The private key is stored inside AWS and is never exposed to the device.
- 01HNNWZ0MV43FF 2y ago
  I guess that makes sense. So it's like a ballot box you can drop data into but only Amazon can pull it back out. Still a bit misleading. The public key is on the device (which is fine) and that's the key it uses to encrypt the data (if we consider the symmetric key as just a performance optimization)