News for hackers. Stuff that matters.

A comment on Forcing suspects to reveal phone passwords is unconstitutional, court says. Parent comment

Re:Forcing suspects to reveal phone passwords is unconstitut... by tsotha on Friday September 25, 2015 @06:29PM (#10281106)
Nonvolatile, of course.
[ Parent | on HN ]
Re:Forcing suspects to reveal phone passwords is unconstitut... by nickodell on Friday September 25, 2015 @08:52PM (#10281637)
I was under the impression that you couldn't run a bruteforcer against these phones because the key is kept inside of a hardware security module. Couldn't the duress code just wipe the key in the HSM?

If they can copy the HSM, that wouldn't help, but in that case, it doesn't really seem like they need your help getting the PIN in the first place.

[ Parent | on HN ]
Re:Forcing suspects to reveal phone passwords is unconstitut... by tsotha on Saturday September 26, 2015 @12:09AM (#10282065)
>I was under the impression that you couldn't run a bruteforcer against these phones because the key is kept inside of a hardware security module. Couldn't the duress code just wipe the key in the HSM?

That's something I hadn't considered. Is it set up that you can create and destroy the keys but never get access to them?

[ Parent | on HN ]