security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

mention the internal timer

Browse Source
This commit is contained in:
Daniel Micay 2020-12-25 00:35:43 -05:00
parent 7192e5e608
commit 73b35a0cd7
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
static/faq.html
View File

@ -350,14 +350,14 @@
element (Titan M on Pixels) and uses it as another input for key derivation. element (Titan M on Pixels) and uses it as another input for key derivation.
The Weaver token is stored alongside a Weaver key derived by the OS from the The Weaver token is stored alongside a Weaver key derived by the OS from the
password token. In order to retrieve the Weaver token, the secure element password token. In order to retrieve the Weaver token, the secure element
requires the correct Weaver key. This is used to implement hardware-based requires the correct Weaver key. A secure internal timer is used to implement
exponentially increasing delays for each attempt at key derivation and quickly hardware-based exponentially increasing delays for each attempt at key
ramps up to 1 day per attempt. Weaver also provides reliable wiping of data derivation and quickly ramps up to 1 day per attempt. Weaver also provides
since the secure element can reliably wipe a Weaver slot. Deleting a profile reliable wiping of data since the secure element can reliably wipe a Weaver
will wipe the corresponding Weaver slot and a factory reset of the device slot. Deleting a profile will wipe the corresponding Weaver slot and a factory
wipes all of the Weaver slots. The secure element also provides insider attack reset of the device wipes all of the Weaver slots. The secure element also
resistance preventing firmware updates before authenticating with the owner provides insider attack resistance preventing firmware updates before
profile.</p> authenticating with the owner profile.</p>
<p>GrapheneOS only officially supports devices with Weaver. The fallback <p>GrapheneOS only officially supports devices with Weaver. The fallback
implementation for devices without it is out-of-scope for this FAQ.</p> implementation for devices without it is out-of-scope for this FAQ.</p>