Hacker News Reader

also basically if enough companies agrees on helping the cause your crypto secrets are quite more likely to be exposed...

View on HN

Isnt the weakness here that there was nothing encrypting the actual key? On a laptop luks key stored in a tpm would usually be encrypted using your passphrase

The NTSB report noted that if the TrustZone secure enclave system was being used, then yeah this data would be toast.

But it speaks more to Oceangstrs negligence that this situation even existed: why wasn't any potential encryption keys escrowed ashore to ensure they could be recovered later? This shouldn't have even been an issue.

It seems the manufacturer of the camera didn't even know (at least in the part of the org communicating with the NTSB) that their storage was encrypted. In any case the media recovered were from testing/non-dive environments, and during an actual dive footage would presumably be recorded directly to the onboard computers (which were irrecoverably destroyed).

Oceangate should take the blame for a lot of things but probably not this.

Reply on news.ycombinator.com