That&#x27;s not necessary. Simply tying the encryption to a strong password instead of a 4-digit PIN would have been sufficient to prevent a firmware update to a locked device from weakening security, at least in this particular case.<p>Throw in a memory-hard key derivation function to make parallel brute-force more expensive.