2026-10-14 20:27 UTC
How so?
If you ever intend to decrypt the data, don’t you need a decryption key?
I think my point stands, you’d need this device to be only capable of encryption. Otherwise, anyone with access to the device can decrypt it. So it goes without saying, you’d have to push the data to a second device which handles decryption.
Replies (2)
-
@0x0@infosec.pub 2026-10-14 20:31
No
-
@black0ut@pawb.social 2026-10-15 06:32
You can have an encryption key that can’t decrypt the data. That’s what public and private keys are. The device can have a public key to encrypt the data, and then it can only be decrypted with the attacker’s private key. No need to even get it out of the device, you can also perform the decryption on the same device. Just don’t store the private key in there.