Re:PSA: Upgrade your LUKS key derivation function
by zamnos on Tuesday April 18, 2023 @10:52PM
(#35623718)
Pedantically, if there's an HSM/similar hardware in play, the CPU only asks for material to be encrypted/decrypted and doesn't have the key in system RAM to be able to do so itself.
MacOS machines with a T2 chip keep the encryption key in the T2 chip so it isn't in system RAM.
MacOS machines with a T2 chip keep the encryption key in the T2 chip so it isn't in system RAM.