Where Embedded Devices Hide Their Keys

A device is only as secure as the place it keeps its keys. Here is a tour of common key storage choices, from the worst to the best.
Why You Should Never Ship One Signing Key

A single key shared across every unit turns one compromise into a fleet-wide breach. Here is why per-device keys matter and how to get them.
Generating Per-Device Keys at Manufacturing

Per-device keys only help if they are generated safely. Here is how provisioning works at manufacturing and the pitfalls to avoid.
Common Mistakes with AES on Microcontrollers

AES is strong, but the way it is used on microcontrollers often is not. Here are the implementation mistakes that quietly break it.