GrapheneOS on Nostr: elly Pixel 3 was the first generation of the StrongBox keystore for the secure ...

elly (nprofile…l8vx) Pixel 3 was the first generation of the StrongBox keystore for the secure element as a better alternative for most use cases than the TrustZone-based keystore. TrustZone-based keystore has far better throughput/latency since it's a CPU mode so it's still around. Pixel 2 added key attestation support also usable for verifying the OS from a server or other device and chaining that to apps. That's what our Auditor app uses. That's on the secure element now. There are a few other APIs.