concept: encrypted usb protocol to prevent hardware keyloggers and such
is this good or just a stupid idea
@kity how do you know there's someone in the middle, or how do you know you're talking to the pc or keyboard
you have to maintain private keys and certificattes and the whole thing and someday someone will extract it from the OS and a cheap keyboard and make a keylogger with both. maybe you could associate each keyboard with each pc but it becomes cumbersome even for an enterprise.
basically same as for drm, it's a lot of effort and not much security
@elomatreb @kity but how do you exchange the key? if there's a device in the middle like a usb keylogger, you have to authenticate both ends, otherwise the device will just encrypt each side and relay the cleartext while logging
@elomatreb @kity like, settings the key manually when you know there is no keylogger? sure
@elomatreb @kity yeah the keyboard wouldn't know the pc changed but the user would quickly notice it being disconnected or it would be detected as an unknown keyboard
nice
@elomatreb @kity but then someone capable of installing a usb keylogger would surely be able to get access to the pin if it's written under it
so it should be generated at some point, copied to the host, and then kept reasonably secret
