Hardware Security

When manufacturing many devices, why give each device its own key instead of the same key in all of them?

  1. ASo that even if one device is analyzed and its key extracted, the compromise does not spread to other devices
  2. BDifferent keys make devices run faster
  3. CManufacturing equipment cannot handle identical keys
Show answer and explanation

Answer: A. So that even if one device is analyzed and its key extracted, the compromise does not spread to other devices

If every device shares the same key, an attacker who obtains one unit and spends the time and money to extract the key endangers every device of that product. With per-device keys, a breach affects only that unit, and only its key needs revoking. Per-device keys are provisioned securely through PUFs, eFuse programming or key injection during manufacturing.

  • A. Correct. It confines the damage to one device.
  • B. It has nothing to do with speed.
  • C. It is not a manufacturing equipment issue.
Practice this topic Back to topic

More Hardware Security questions

  1. When a CPU hardware vulnerability is discovered, which is one countermeasure applied to CPUs already shipped?
  2. Which best describes the problems addressed by hardware security?
  3. Which describes a side-channel attack?
  4. Which correctly pairs the principle behind timing attacks with a typical countermeasure?
  5. What weakness lurks in the password comparison function above, and what is the fix?