semisol

There are some critical details in the user guidance that can make the difference between secure and insecure. “EAL5/6+” certified SEs mean nothing if they do not follow the proper use guidelines, or they do not integrate the SE in a secure way. If you are wondering which HWWs: all of them. nostr:note1kyzx4kplsqmytmj5wtg9gzsqwhvqqfvaymww8ek6aak352xexm9qmm93gu

Too many HWWs claim “EAL6+ certified secure element” when they do not comply with the requirements for the secure usage of the chip. Without complying with the user guidance (which requires NDA), the Common Criteria certification of the SE can’t be considered valid and the used setup may not be secure at all.

Qualcomm’s business model is taking everything and burning it down + slapping NDAs on it

#plebslop exhibit 3837492 half the article is full of unrelated sponsors and the other half provides absolutely no value nostr:note1ls2ftqkkp82406mtpffpnla3ldfmkj3cz80pjdhwsy44wfj8qp0slxkcng