-
@dbph @moxie My ideal solution for such a problem (entropy stretching of user PIN/password) would be if the current Android backup infrastructure could already generalize. It has server-side secure elements with minimal attack surface and insider attack prevention built in from the start ...Permalink On twitter.com
Mood -1 🙁
-
@dbph @moxie instead of the insane complexity of SGX. However, this is hard for different reasons and unfortunately not yet possible. Giving the protection afforded by Android backup to users' lockscreen knowledge factors to arbitrary third-party apps in a scalable way is really non-trivial.Permalink On twitter.com
-
@dbph @moxie Some details at security.googleblog.com/2018/10/google-and-android-have-your-back-by.html and usenix.org/conference/enigma2019/presentation/mayrhofer (starting around 14:30 in the talk).On twitter.com