As Bruce Schneiner of Counterpane like to point out, crytography and security are hard to get right. Microsoft has a long history of takeing three released versions to get software right, and that only means getting the bug level town to tolerable levels. And Intel has been known to botch the implementation of floating point, amoung other things.

Palladium is setting up the PC industry for something it's never gone through before, but the auto industry has. A recall. You can patch or update software, even BIOS, but a botched implementation of hardware security means a CPU replacement at least, or replacing the entire motherboard. And the time needed to close the window of vulnerability with a chip fix is a lot longer than with a hardware fix.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/96/15722#15722