News for hackers. Stuff that matters.

A comment on Decrypting the Signal App. Parent comment

Re:Decrypting the Signal App by izacus on Friday December 11, 2020 @06:19AM (#25384505)
Basically you need root access to your own device. It's like "decrypting Chrome data" when you just look into ~/.config/chrome after your disk encryption keys have been entered.

(Android devices use Full Disk Encryption by default and extracting this data needs an attacker that has gained access to unlocked storage first.)

[ Parent | on HN ]
Re:Decrypting the Signal App by MacsHeadroom on Friday December 11, 2020 @06:40AM (#25384630)
It's not that simple. Keystore uses an HSM if available. Decrypting FDE and having root gets you nowhere if the keys are in an HSM.

The only way to secrets on a device with an HSM is to get past FDE, get root, and disable the HSM BEFORE the keys are created/stored.

Disabling the HSM after the keys have been stored simply wipes the keys and makes them unrecoverable forever.

[ Parent | on HN ]