Consumers who think that owning a Windows Phone 8-based smartphone will give them access to custom ROMs are in for a rude awakening. Per reports, the platform's high-level security changes will not allow any kinds of custom ROMs to be developed.
While the new information seems like an unfortunate one for hackers looking to make the most out of the upcoming OS, both users and businesses would welcome the news. Encrypting the entire device, including the operating system and applications, has made the platform's security changes possible.
According to a Mobile Jaw report, the company "baked it (i.e. the device encryption) in for the entire device including the operating system and applications."
Additionally the report avers that the encryption is switched on from "the very first moment that you power on the device."
This encryption method was designed in a similar manner to that of Microsoft's BitLocker technology that can be found in Windows 7 desktops and laptops. However, the main difference is that the keys are not manageable on Windows Phone, like they are on the desktop.
Currently, the device encryption is not certified but is expected to be eventually. Microsoft has already revealed that it is looking to get the encryption FIPS certified. The encryption "is backed by the TPM 2.0 standard, which requires unique keys to be burned into the chip during production."
Moreover, a number of common security keys from Microsoft and the OEM, burned onto the chip in a read-only manner, currently exist. Additionally, the firmware has a secure UEFI environment that helps in validating if the device has all the keys on initial boot.
Interestingly, the boot manager also knows which applications are to be started on boot-up and will only launch those that are signed and trusted. Custom ROMs don't come with the correct digital signatures and, therefore, will not be able to start.
The good news is that users won't need to worry about viruses and malwares as everything, including Microsoft's own applications, OEM drivers, and OEM customizations, are required to run in their own sandbox.
