&gt;I suspect we&#x27;ll ultimately wind up with mainstream device manufacturers maintaining some kind of per-device master key that they turn over when ordered.<p>It will be impossible to secure that database. Any number and size of bribes would be worth spreading around to gain a dump of it. Once I have a dump, you&#x27;re up shit creek because you&#x27;re faced with changing every key of every device you&#x27;ve ever sold to resecure them. However, any key changing mechanism you create is an exploitation vector criminals can use to randomly scramble their &quot;master key&quot; and not report the new one to you, and again, any certs you use to secure this process will become v cost effective to bribe for. So we&#x27;re left with a situation where one breach screws everyone and it hurts legitimate users way more than the criminals it is targeted at.<p>Back doors are back doors man. Anyone can use the door handle, once it exists.