Immediate transition to BFU when turning off screen and other ideas

confidensuide

Why doesn't GrapheneOS add an option for an instantaneous transition to BFU every time the screen is turned off? It could be implemented not as a mandatory feature, but as a toggle. Even if it has UX downsides, just give users the possibility to enable it. Or how about creating a phone that will only have wireless charging and will not have a physical USB port? Or at least creating a phone where the USB port can be easily and permanently physically destroyed by hand, if the user so desires. What about implementing an additional layer of encryption using the user's password at the OS level, assuming that the security chip is not enough or we don't trust him completely? For example, use a second password for this.

DeletedUser685

confidensuide Why doesn't GrapheneOS add an option for an instantaneous transition to BFU every time the screen is turned off?

It's called reboot

confidensuide Or how about creating a phone that will only have wireless charging and will not have a physical USB port?

Charging-only or Off mode in the USB C settings

confidensuide What about implementing an additional layer of encryption using the user's password at the OS level, assuming that the security chip is not enough or we don't trust him completely?

Doesn't make sense. If we don't trust the security chip, then what's the root of trust and how to implement hardware throttling in a more secure manner? Do you suggest another more secure Titan M3?

confidensuide

DeletedUser685 But, the minimum reboot interval is 10 minutes. But it needs option to be done immediately. And what's stopping us from deleting encryption keys without the reboot animation? And I didn't say we're forgetting about the security chip. I said OS-level encryption would be an additional layer of security.

userofgos

confidensuide But, the minimum reboot interval is 10 minutes. But it needs option to be done immediately

Press & hold power button > press restart

confidensuide And what's stopping us from deleting encryption keys without the reboot animation?

I don't think you understand what what is required to reboot whether it be manually or via the GrapheneOS auto-reboot. It is not simply a "a reboot animation"

dhhdjbd

confidensuide

Instant bfu lock should be the "end session" for user profiles,
but someone corrext me if i am wrong.

And you can already use any password you like (complexity), to protect against an titan exploit.
The security chip does not store the password.

nandohyphen1

confidensuide But it needs option to be done immediately.

Technically, technically if auto reboot was set to think it needed to constantly be done immediately, your phone would just be stuck in an endless bootloop. Phone would boot, think it should reboot, so it reboots, turns on, thinks it should reboot, reboots, and so on.

confidensuide

I know that a reboot is not just an animation. That is exactly what I am talking about. Moreover, animation is not required to evict encryption keys, and a reboot is not required either. For example,

FLAG_EVICT_CREDENTIAL_ENCRYPTION_KEY = 1;

DevicePolicyManager dpm = (DevicePolicyManager) getSystemService(DEVICE_POLICY_SERVICE);
dpm.lockNow(FLAG_EVICT_CREDENTIAL_ENCRYPTION_KEY);

works precisely without any animation. This is exactly what I mean. Why not just do something like dpm.lockNow(1); every time the screen is turned off? And as for the reboot software button, in an emergency situation you won't have enough time to hold down the physical buttons for it to appear, but you will have time to press the lock screen physical button. So, I am proposing to erase temporary encryption keys from RAM every time the screen locks. More precisely, to add such a feature so that a user could enable it.

TrustExecutor

You can submit a feature requrest in the Github issue tracker.

It may not be as simple as just returning to BFU without a reboot.

I don't know how the Owner profile would compare for this, vs. secondary profiles.