News for hackers. Stuff that matters.
Re:TKey is a RISC-V computer in a USB-C case, that can run s... by kfreds on Monday December 25, 2023 @06:00PM (#38767136)
None. You'll simply have to trust that we have configured your TKey with a UDS of good entropy, and that we haven't saved it - intentionally or unintentionally.

However, the device's flexibility allows you considerable control. For instance you could have its KDF mix in a user-supplied secret in addition to the UDS.

Of course you'd still be trusting that the device actually performs the KDF we claim it does. That's why we also sell the TKey Unlocked.

Re:TKey is a RISC-V computer in a USB-C case, that can run s... by adastra22 on Monday December 25, 2023 @06:55PM (#38767499)
Seems like that secondary derivation is something that can be attested to, if it is done homomorphically.