Daniel Micay on Twitter: "Ideally, Google would make the Titan M available to other vendors. An HSM with a solid design, great integration into AOSP and open source firmware with reproducible builds is a very compelling product. For now, it widens the security gap between Pixels and other Android phones." / Twitter

twitter.com/redpig/status/ Exciting to hear that the Pixel 3 security chip will be open source with reproducible builds. That's a compelling reason for replacing the approach of using off-the-shelf hardware for the Pixel 2 security chip alongside reducing attack surface, etc.

Quote Tweet

Will Drewry

@redpig

Oct 17, 2018

I’m really proud of what our team was able to accomplish: blog.google/products/pixel android-developers.googleblog.com/2018/10/buildi

1

6

17

Daniel Micay

@DanielMicay

Oct 17, 2018

Preventing firmware upgrades on the security chip by someone with the signing keys is also a great feature and was introduced with the initial non-Titan security chip on the Pixel 2: android-developers.googleblog.com/2018/05/inside The main new feature is the StrongBox Keymaster (keystore on the chip).

1

2

5

Daniel Micay

@DanielMicay

Oct 17, 2018

I'll be able to add support for the StrongBox Keymaster to my Auditor app (github.com/AndroidHardeni). It may make sense to use both the TEE and StrongBox implementations at the same time, although bloating the QR codes for local verification wouldn't be a very desirable outcome.

1

4

Daniel Micay

@DanielMicay

Ideally, Google would make the Titan M available to other vendors. An HSM with a solid design, great integration into AOSP and open source firmware with reproducible builds is a very compelling product. For now, it widens the security gap between Pixels and other Android phones.

10:56 PM · Oct 17, 2018Twitter Web Client

Replying to

Hope can get more info about OpenTITAN. Btw, TITAN M is likely a NIST 800-193 complianced chip while Google never mention about it.

Conversation