With the Pixel 6 sequence, Google started creating its in-house Tensor SoC. However that wasn’t the primary time the search big used a bit of customized silicon in its smartphones – the Pixel 2’s Pixel Visible Core was technically the primary. One era later, the corporate introduced that Pixel 3 gadgets would come with a {hardware} safety module dubbed Titan M. Then, in 2021, Google adopted it up with the Titan M2. The safety chip has since change into a promoting level for Google telephones just like the Pixel 7 series and Pixel 6a.
So on this article, let’s take a more in-depth take a look at the function of the Titan M2 in Pixel gadgets, the way it works, and why it’s even obligatory within the first place.
What is the Titan M2 chip all about?
Google’s Titan server chip (left) and first-generation Titan M safety chip (proper)
The Titan M2 is a devoted safety chip included in Pixel 6 and Pixel 7 sequence smartphones. Google designed the Titan M2 in-house in order that it may train full management over its characteristic set. The chip is predicated on the RISC-V CPU architecture and comprises its personal reminiscence, RAM, and cryptographic accelerator.
The Titan M2 is among the many measures Google has employed to enhance smartphone safety through the years. The corporate makes use of the chip in its Pixel telephones to supply an extra layer of safety on prime of Android’s default safety measures.
Google designed the Titan M2 chip to reinforce Android’s default safety measures.
Take Android’s obligatory full-disk encryption. On most gadgets, it depends on a safety characteristic referred to as a Trusted Execution Setting (TEE), which is actually the safe space of a processor. Android gadgets retailer their encryption keys inside this safe space, which is in flip guarded along with your sample, PIN, or passcode. In different phrases, the TEE isolates cryptographic keys and by no means reveals them to the person and even the working system.
Associated: Everything you need to know about encryption
Just about all smartphone SoCs at the moment have a TEE or related safe surroundings. On Snapdragon chips, it’s generally known as the Qualcomm Safe Execution Setting (QSEE). Apple’s Arm-based chips just like the M1 have the Safe Enclave. With these safe environments in place, malicious apps can’t entry decryption keys, biometrics, and different delicate information.
With the Pixel 3, Google decoupled the TEE from the chipset and used a separate safety module as a substitute. The Titan M, which has now been changed by the Titan M2, can virtually be thought of a standalone processor by itself. The chip has its personal flash memory for storing delicate information and runs its personal minimal working system (generally referred to as a microkernel).
The Titan M2 is a separate chip that does not share assets like reminiscence or cache with the principle processor.
It’s value noting that devoted safety chips aren’t a brand new idea. Many laptop motherboards have a Trusted Platform Module (TPM) chip that serves the identical goal, albeit with much less flexibility.
What does the Titan M2 chip do?
Gary Sims / Android Authority
Not like the principle SoC that performs general-purpose duties, a devoted safety chip just like the Titan M2 executes only a few capabilities. This vastly reduces the variety of potential assault vectors since most software program can’t instantly work together with the safety chip.
As for what the safety chip truly does, let’s begin with booting the Android operating system. Once you activate a Pixel system, the Titan M2 communicates with the bootloader to validate that you simply’re operating the newest recognized model of Android. This test ensures an attacker hasn’t rolled again your system’s working system to an older, probably unsafe model. Google additionally states that the chip safeguards towards malicious makes an attempt to unlock the bootloader.
The Titan M2 comes into play as quickly as you press the facility button, fairly actually.
As soon as booted, the telephone’s storage stays encrypted and inaccessible till you clear the lock display screen immediate. The Titan M2 performs a key function right here because it shops the decryption keys. Even when an attacker tampers the working system to attempt to brute-force their method by means of the lock display screen, the chip will restrict the variety of makes an attempt on the {hardware} degree. Titan M2 will solely reveal the decryption keys when you enter the right sample or PIN.
However what if an attacker tries to tamper with the Titan M2 instantly? Google considered that too. You possibly can’t change or replace the chip’s firmware with out the system’s sample or PIN. The corporate additionally says it hardened the chip towards side-channel assaults like energy evaluation and voltage fluctuations.
The Titan M2 additionally helps Android StrongBox, which is a secure cupboard space for cryptographic keys utilized by third-party apps. A fee app, for instance, may request the chip to generate and retailer a personal key in your saved playing cards. And with Android’s Protected Affirmation, the chip additionally helps the common FIDO authentication customary. This implies you should use Pixel telephones as a bodily two-factor authentication key in your on-line accounts. By way of safety, Google treats it as on par with the $30 Titan Security Key.
The Titan M2 hasn’t revolutionized smartphone safety by any means, but it surely does get rid of some key potential assault vectors. Google is presently the one smartphone maker to make use of a devoted safety module. Nonetheless, that doesn’t imply different Android gadgets aren’t safe sufficient. The Arm chips utilized in fashionable smartphones even have remoted and safe environments, simply to not the identical diploma because the Titan M2.
Learn subsequent: The best Pixel-only features explained
