.@dangoodin001 In regards to http://arstechnica.com/security/2016/07/androids-full-disk-encryption-just-got-much-weaker-heres-why/ …, it's only the OEM / OS vendor with the signing keys. Google only has those for Nexus.
-
Android made a mistake by deriving FDE based off the SHK key and then storing it in software. Fundamental diff.
As far as I understand it, you even saw the risk of that approach and changed it in Copperhead, right?
-
-
CopperheadOS allows and encourages using a separate disk encryption passphrase instead of relying on obfuscation.
-
Since the TEE/SE stuff is exactly that: obfuscation with a lot more sophistication assumed than it has in reality.
- 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.