.@dangoodin001 In regards to http://arstechnica.com/security/2016/07/androids-full-disk-encryption-just-got-much-weaker-heres-why/ …, it's only the OEM / OS vendor with the signing keys. Google only has those for Nexus.
-
guy just used a software-only exploit chain to recover a key described as "hardware-bound." sounds diff to me.
Android made a mistake by deriving FDE based off the SHK key and then storing it in software. Fundamental diff.
-
-
Is this Android's choice or Qualcomm's choice? It's probably not done the same way by Exynos (Samsung), Tegra and MTK.
-
It's a fairly safe assumption that Intel > Samsung > Qualcomm/NVIDIA > MTK when it comes to security/robustness.
- 9 more replies
New conversation -
-
-
As far as I understand it, you even saw the risk of that approach and changed it in Copperhead, right?
-
CopperheadOS allows and encourages using a separate disk encryption passphrase instead of relying on obfuscation.
- 3 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.