ORWL – The first open source, physically secure computer

Re:ORWL – The first open source, physically secure computer by ge0rg on Thursday September 29, 2016 @12:34PM (#12606608)

Unless you also want to perform the AES operations in your head, you have to rely on the hardware and software of your computer to perform them. An attacker could then replace the AES routine you use with one that stores a shadow copy of your key, or exfiltrates it over some covert channel.

[ Parent | on HN ]

Re:ORWL – The first open source, physically secure computer by Dzugaru on Thursday September 29, 2016 @04:22PM (#12608467)

Well yeah, but this assumes I don't know the fact the physical access had place and proceed to enter the passphrase revealing the key unawaringly afterwards. If this is what "having physical access" means - then yes, I agree, game over, and ORWL solves it.

But if I know the attack took place (FBI broke into my house, the computer is locked in a safe etc.) - the data should be secure.

[ Parent | on HN ]

Re:ORWL – The first open source, physically secure computer by gravypod on Thursday September 29, 2016 @01:09PM (#12606944)

What if the crypto side of things is remove-able and carry-able on your person? Or what if it could be subdermally implanted so you know no one can pick pocket you and replace it?

Just a thought.

[ Parent | on HN ]

Re:ORWL – The first open source, physically secure computer by JoshTriplett on Thursday September 29, 2016 @01:17PM (#12607012)

> What if the crypto side of things is remove-able and carry-able on your person?

You might as well have the entire computer removable and portable.

[ Parent | on HN ]

Re:ORWL – The first open source, physically secure computer by howardbeware on Thursday September 29, 2016 @01:54PM (#12607333)

And that's pretty much what ORWL is.

[ Parent | on HN ]