On 04/04/2017 10:29 AM, [email protected] wrote:
Opal is proprietary garbage,
Actually its an open standard, not controlled by any government or corporation. One link I provided was to the standard which gets down to the data structure byte memory layout and data interchange requirements.
and proprietary crypto schemes are almost always terrible.
They use standard encryption algorithms that have to pass very strict compliance tests before a product is certified. The OEM implementation inside the drive might be "terrible" but the algorithms will be correct or it won't pass regression test certification.
(there is also no real way to check that it is actually working and still working).
Difficult, yes, but not impossible. One link I provided was NIST tearing one apart for deep inspection of the implementation. Governments do this all the time. Granted you may not want to go to that extreme, but other people do. Its just that those deep dives generally don't get published.
On the other hand, one should be able to read the firmware off the drive and then decode it with IDA Pro to see exactly what the drive does, if you are that interested. I take it your not that motivated to prove its not garbage. I get that. I happen to have an natural curiosity in that way.
TXT is intel marketing,
I plead no contest there. It is however better than doing nothing. Each technology generally raises the bar a few notches. I would not bet my life on any one technology. The best solution comes from using the strengths of each technology to make up for the weaknesses of the others. Understanding how to layer the strengths is the key to a secure system.
Serious question: Ok, I am curious, if all these technologies you mentioned are "garbage", then what do you see as the technological solution to securing your own systems? Do you have one technology in mind that someone could not find a way to hack through?
thanks in advance for your response, Steve. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/0f64479c-4c73-6153-5959-448e1cc956a3%40jhuapl.edu. For more options, visit https://groups.google.com/d/optout.
