Hector Martin

If they can't audit software properly I'm not going to assume they can audit hardware properly.

It sounds like a bad faith debate... Roca is concerning, but: - Even if CC are not perfect, they are just the best framework to ensure high level of security - CC labs are clearly better auditing security than any other org - Roca remains complex, took several years of research

At the end, the vendor patched it. Impacted products were known since they went through certification, devices on the field have been recalled and replaced...

ROCA took several years of research because the source code was closed and unauditable to third parties. There are plenty of cryptographers who would've raised an eyebrow at that code, and RSA keygen is one of the first things you look at for problems.

ROCA was so obvious once the finger was pointed at the problem area that I had friends who reverse engineered it through key analysis and guessed at what the bad code was doing, before the official research paper was published.

This is an endemic problem in parts of the industry, where half-competent people are the ones doing the audits, while access is denied to those who could actually find problems quicker (but might not work for a big auditing firm).

Ok I got your point and I don't disagree. I just want to insist on the fact that the solution is more to try to open Secure chips, rather than using broken ones... Telling the opposite is a big fallacy, and I hope it's just a troll

Oh, I absolutely would *love* to have open secure ICs. But since that doesn't seem to be happening any time soon, you're left with a choice, and I'm starting to wonder if the open alternative might actually be better given that we can't have both.