• monogram@feddit.nl
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    4
    ·
    16 days ago

    That last part sounds overdone:

    And it’s unclear whether the type of sophisticated malware that routinely infects consumer and enterprise Windows users will be able to decrypt encrypted database contents.

    Thanks to W11 requirements for a tpm chip, I don’t think it’s a stretch to assume it uses the same method as Passkeys use.

    • tribut@infosec.pub
      link
      fedilink
      English
      arrow-up
      22
      ·
      16 days ago

      No, with passkeys you tell the TPM: Never give me the secret, even if I ask you. In this case, Recall needs the database decrypted to work. TPM won’t save you.