> But DRM only requires a secret key in the hardware. None of the implementing code needs to be secret, and indeed DRM that relies on opaque binary blobs or convoluted setup is useless.
DRM for a general purpose device needs way more than that. You need a full 'Trusted Execution Environment' to run the code that uses those keys.
Trusted execution doesn't need blobs, no? I.e. you can have secure boot with perfectly open booting. DRM is only used against the user, not for making things secure for the user. That's why DRM is relying on blobs.
DRM for a general purpose device needs way more than that. You need a full 'Trusted Execution Environment' to run the code that uses those keys.