Conversation

Still waiting

Quote Tweet

May 9, 2020

Google promised to open source Citadel, the firmware for the Pixel’s Titan M security chip, 2 years ago. Doing some light RE, it’s likely the code is a branch of Chromium EC project. Has modules for AVB, privkey storage/crypto, OEM un/locking. Confused why they haven’t yet?

chompie

@chompie1337

May 11, 2021

"In the coming months, the security community will be able to audit Titan through its open-source firmware". Written October 17, 2018.

blog.google

Titan M makes Pixel 3 our most secure phone yet

Introducing Titan M, an enterprise-grade security chip that makes Pixel 3 Google’s safest phone yet

Daniel Micay

@DanielMicay

Replying to

@chompie1337

I doubt it's ever going to be released for the current ARM-based Titan M. I think they intended to do it but can't because of an issue like proprietary secure element APIs being under NDA. It's annoying that they don't simply state what's wrong and admit it won't be happening.

11:22 PM · May 11, 2021Twitter Web App

Likes