3 ms·
Encryption doesn't mean: - that it's implementation secure (for example Android FDE is trivial to crack for us, imagine what a joke it is for the NSA) - that
by zobzu 13y ago
Encryption doesn't mean:
- that it's implementation secure (for example Android FDE is trivial to crack for us, imagine what a joke it is for the NSA)
- that it's algorithms are secure (gone are the days where the NSA would warn us DES is broken to help US companies)
- that the data is never stored or sent in clear - the system has full access to the data, in clear, when its running.
- that there is no backdoor. each step of the implementation can have relatively hard to spot backdoors. Specially in proprietary code.
- jervisfm 13y ago> Android FDE is trivial to crack for us What vulnerabilities exist with the full disk encryption on android that make it insecure ?
- JoachimSchipper 13y agoLikely stuff like http://appleinsider.com/articles/13/03/07/researchers-bypass-android-encryption-by-exposing-phones-to-freezing-temperatures http://appleinsider.com/articles/13/03/07/researchers-bypass... - basically, the encryption is fine, but you need somewhere to store your keys. "Somewhere" ends up being RAM, which is usually not very secure.