Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Android has the concept of hardware backed security as TEE and in latest Android i.e., Android Pie devices can have a HSM (Strongbox).
In Android Pie and later, TEE (Trusted Execution Environment) is a secure area within the main processor that provides a protected environment for trusted applications. It ensures isolation and security for tasks like biometric authentication and secure key storage.
HSM (Hardware Security Module) is a separate hardware component used for secure key storage and cryptographic operations. It offers tamper-resistant protection and is commonly used in enterprise environments for securing sensitive data and enabling secure communication.
No, the Android HSM (Strongbox) is not designed or intended to be used as a Whitebox cryptography solution. Android HSM, or Strongbox, is an implementation of an HSM-based Keystore for secure key storage and cryptographic operations in Android devices. It leverages dedicated hardware for enhanced security and protection of cryptographic keys. However, it is not designed to provide the specialized techniques and algorithms required for a complete Whitebox cryptography solution.
In the context of Whitebox cryptography, TEE can be leveraged to create a secure execution environment for cryptographic operations and key management. By running the Whitebox implementation within the TEE, the cryptographic algorithms and keys are protected from being exposed or tampered with, even if the device's operating system or other software components are compromised.
This holds true for latest Android release too.
