News for hackers. Stuff that matters.

A comment on TKey is a RISC-V computer in a USB-C case, that can run security applications. Parent comment

Re:TKey is a RISC-V computer in a USB-C case, that can run s... by FiloSottile on Monday December 25, 2023 @03:19PM (#38765747)
That's the whole point of a TKey as a security device: the secret available to an application depends on both the device it's running on and the application, and can't be extracted, so you can do things like "sign a blob only if it follows these rules" and enforce it in hardware. If the device wasn't locked, you could just... change the rules.

How is that not a legitimate form of security?

[ Parent | on HN ]
Re:TKey is a RISC-V computer in a USB-C case, that can run s... by josephcsible on Monday December 25, 2023 @04:56PM (#38766509)
If it's my device, then I should be able to change the rules.
[ Parent | on HN ]
Re:TKey is a RISC-V computer in a USB-C case, that can run s... by teruakohatu on Monday December 25, 2023 @05:22PM (#38766750)
If you can change the rules then someone else can also change the rules.

And any ability to change the rules will greatly increase the surface area of attack.

[ Parent | on HN ]
Re:TKey is a RISC-V computer in a USB-C case, that can run s... by kfreds on Monday December 25, 2023 @05:17PM (#38766711)
You're more than welcome to change the rules. Please read my other comments in this thread, and you'll hopefully find answers to your concerns. The TKey Unlocked gives you all the control you're asking for.
[ Parent | on HN ]