you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 year ago (3 children)

Android boots in layers that are encrypted with different keys. The first key in the TPM enlocks the base OS up to the lock screen. From there a pin is entered and the rest of the system is decrypted.

If a compromise happened in the OS the phone would just fail to boot since the integrity of the system is validated by the TPM.

  • source
  • parent
  • hideshow 3 child comments
  • [–] -1 points 1 year ago (2 children)

    Yes, that's how a normal bootchain works in every system ever - like the IoT device running Linux I'm right now working with.

  • source
  • parent
  • hideshow 2 child comments