Hector Martin

And yet nobody found ROCA. Even though that code stank. Audits are largely useless, because they often just verify that you do what you say you do, not that you're actually secure. "Yes, we have these mitigations (which stop one variant of an attack but not another)".

If they can't audit software properly I'm not going to assume they can audit hardware properly.

It sounds like a bad faith debate... Roca is concerning, but: - Even if CC are not perfect, they are just the best framework to ensure high level of security - CC labs are clearly better auditing security than any other org - Roca remains complex, took several years of research

At the end, the vendor patched it. Impacted products were known since they went through certification, devices on the field have been recalled and replaced...

ROCA took several years of research because the source code was closed and unauditable to third parties. There are plenty of cryptographers who would've raised an eyebrow at that code, and RSA keygen is one of the first things you look at for problems.

ROCA was so obvious once the finger was pointed at the problem area that I had friends who reverse engineered it through key analysis and guessed at what the bad code was doing, before the official research paper was published.