RE: Restricted storage

[Jonathan S. Shapiro]

On Wed, 2006-05-31 at 15:33 -0600, Christopher Nelson wrote:
> [Bas wrote]
> > ...because there is no no way that it can check if the storage 
> > it received is indeed opaque.
> 
> What's the point of providing opaque storage to store encryption keys,
> if you cannot verify (or provide some guarantee) that it is, in fact
> opaque?  You might as well not have it, because it provides you no
> conceptual security.  It's not trustable.

This is entirely correct.