There is also the question: when the vault will release the main key? On what conditions. I assume standard anti-tamper safety, signed app, signed system, secure boot/locked bootloader. On rooted phones and/or normal desktop systems, this security model will fail instantly. If there really is the need to protect data for real, introduce the password possibility and warn the user about data encryption. Look at Veracrypt, this is a good security model based on encryption, not HSMs. If the app is supposed to be used on bootloader locked phones ONLY, then the pin+vault are secure enough for non-critical data. But I would argue if it enough for a hot wallet. A very bad examples are: Trust wallet and Cake wallet, both using pins only, and Cake wallet is using pin also in the desktop version which means NO SECURITY AT ALL.

Ok, so: "Use Argon2id to derive a key-encryption key from the PIN." gives little to no security, because of a very low entropy of the pin, unless argon2 params are excessive beyond this world. The whole security is being held by the hardware vault. HSMs, in this case the vault, provided by the system, do not protect data cryptographically, those are more like "safes" and protect data physically. There are known attacks using laser and/or noise, emf, undervoltage and other stuff to pull keys from HSMs. Also there are CPU bugs which can allow to grab the keys. In general this type of security is "good enough" for simple data, but it's nowhere near a long password with high entropy (long is above 30 chars and/or 9 words). To protect data cryptographically, the key material has to have high entropy, there is no escape from that. Password stretchers like Argon2 help, but to an extent. An HSM can store that entropy for us at the cost of the possibility of being cracked.

https://blossom.primal.net/49da7c7b2b90f70cb4af64d5b7f1a9c859940894632b6592bcc080b67a6d1093.ogg

"Dedicated secure hardware on the device protects the integrity of this reference image" My advice? Stop this before it fucks up the humanity completely.

https://www.youtube.com/watch?v=YZ-tXHd5qf4

If it's "lock only" which means it's designed to allow an attacker to access data at some point, then it's fine. But if it is supposed to protect the data fully using encryption, then pin is not sufficient. Numeric values have low entropy. And no, an HSM is not an excuse.

I think world had enough of him. AI needs to be equally available, not regulated. Someone attacks with AI, someone defends with AI. But in order to defend INCLUDING FROM STATE ATTACKS, everyonr has to have a chance of accessing AI. And not the refusing-type AI.

Hi, I have bad news: 9 digit pin code has the entropy searchable by a trained monkey. Add a proper password option with an Argon2 kdf

Do not the cat, cause he fat

Well.. I don't want to tear down your mentall wall, but I think you have incomplete data about married women...

This is a bad idea... It may cause way more harm than good.

No password in the desktop version. 6 digit pin has an entropy searchable by a trained dog