Replying to Avatar semisol

And everyone keeps sourcing their SEs from a company (Microchip) which had made 3 revisions of their chip with only ROM changes and still has not fixed the root cause of flaws in the ATECC508A, 608A and 608B (used in a lot of HWWs) which is that there is no light sensors or self-terminate mechanism in the case of an attack

Their way of rating chip security is via the JIL rating system which is a very low bar to pass and involves the vendor coming up with their own numbers on how hard it could be to attack it, which they conflate with EAL5/6 because that is a lot harder and expensive for what is supposed to be an IoT SE nostr:note1upvg0s73kj57387rpq3zq55jm29fsrf838vnps79k3zzk3ypaldshhpnft

Avatar
mutatrum 1y ago

What about Tropic?

Reply to this note

Please Login to reply.

Discussion

Avatar
semisol 1y ago

A good change.

But far from ready. Security ICs take years to develop and perfect.

And in the end, you still cannot verify code running on it, the only difference being NDAd documentation and architecture which makes little difference to the end user.

Thread collapsed