3 ms·
The point is that you'd have to read that data somehow, and likely from a user-level process, so you'd have to make some sort of system call to do that. Unless
by drblast 13y ago
The point is that you'd have to read that data somehow, and likely from a user-level process, so you'd have to make some sort of system call to do that.
Unless the entropy that's the input key is something ephemeral, it's only a matter of time before the key is found. And in the case of malware, you can pretty much assume that the victim/target does have physical possession of the machine.
- wglb 13y agoYes, it will be very clear from executing the code a step at a time where the key can be found (MAC address, cpu serial id, unique property from external hardware) but that does not give you the value of the key derived from that per-installation specific hardware. Yes, it is a matter of time, so long as you can run this experiment on every unique hardware environment.