News for hackers. Stuff that matters.
Re:AMD to consider coreboot/Libreboot support for Ryzen by Ajedi32 on Friday March 03, 2017 @09:52AM (#13783198)
> a case of a security architecture that is literally founded upon obscurity (ie, keeping the keys secret)

Huh? Relying on the secrecy of keys rather than secrecy of the code is the _exact opposite_ of security through obscurity.

Re:AMD to consider coreboot/Libreboot support for Ryzen by DigitalJack on Friday March 03, 2017 @10:55AM (#13783674)
I can see their point. One can view obscurity as "not common knowledge" or "information that can be found if you look hard enough."

A secret key technically falls in the later. You have it somewhere. If someone looks hard enough, they can find it. It may take ridiculous effort to the point of being impractical, but that is still obscurity.

I recognize that when people speak of "security through obscurity" they are referring to esoteric knowledge that is difficult but not impractical to find.

Re:AMD to consider coreboot/Libreboot support for Ryzen by moppl on Friday March 03, 2017 @12:08PM (#13784274)
Ruan writes in his book in chapter 4 "The Engine: Safeguarding Itself before Safeguarding Others":

"In addition, there is a basic guideline for realizing security: Never rely on security through obscurity. When designing security hardening features for the engine, it is always assumed that all firmware source code and internal architecture documentation may be obtained by attackers. The engine’s security design principle is to harden the product by applying proven cryptography and security primitives, rather than rely on hiding secrets in the code or documents."

So they cast their secrets in silicon I guess, which would be incomparably harder to recover.