You can have an encryption key that can’t decrypt the data. That’s what public and private keys are. The device can have a public key to encrypt the data, and then it can only be decrypted with the attacker’s private key. No need to even get it out of the device, you can also perform the decryption on the same device. Just don’t store the private key in there.
Right, but that’s referring to where the encryption key lives, what kind is used, and how. In the above comment, I’m just stating you need a decryption key.
Earlier I rose that you could store the decryption key on a separate device. I thought 0x0 was contesting that idea as “not how encryption works when l implemented properly.”
You can have an encryption key that can’t decrypt the data. That’s what public and private keys are. The device can have a public key to encrypt the data, and then it can only be decrypted with the attacker’s private key. No need to even get it out of the device, you can also perform the decryption on the same device. Just don’t store the private key in there.
Right, but that’s referring to where the encryption key lives, what kind is used, and how. In the above comment, I’m just stating you need a decryption key.
Earlier I rose that you could store the decryption key on a separate device. I thought 0x0 was contesting that idea as “not how encryption works when l implemented properly.”