[Cryptech Core] auto-zeroise and complex use cases

[Peter Stuge]

Joachim Strömbergson wrote:
> So, Rob, can you explain what problems you saw and for which use cases?

Please do.


> One possibility is to allow SW to enable/disable the auto-zeroise
> functionality. But it sounds like a good way to bypass security
> functionality. Or would this be ok?

I don't think that's OK. If software wants to keep the key alive then
it can simply poll status as you wrote. Even on battery a wakeup
every 10 s is no big deal.


//Peter