logoalt Hacker News

bybtoday at 7:28 PM1 replyview on HN

The RP2350's secure enclave made it particularly attractive for use as a Yubikey alternative.

There will always be an arms race between safe-crackers and safe-builders. Presumably the lessons learned will help make the next generation tougher to break into.


Replies

octoberfranklintoday at 9:23 PM

There will always be an arms race between safe-crackers and safe-builders.

This is dismissive and glib. And it's the wrong lesson.

You wouldn't say this about symmetric cryptography. AES-encrypted ciphertexts from 25 years ago are still secure today, and nothing on the horizon is likely to change that. No arms race.

The "arms race" exists because the security model for trusted hardware is intrinsically flawed. If the attacker has physical posession of the device, your security is transient and at the mercy of the arms race. So stop doing this! Trusted hardware also has extremely negative externalities on the whole computing ecosystem.

(*) or 45 years, if you exclude cryptosystems (56bit single-DES) used only because of silly export laws.

show 2 replies