4 ms·

Secure Enclave is not really ‘hardware’; despite being isolated from the main OS and CPU, it is still software-based and accepts software updates signed by Appl

• germanier 11y ago
  Ok, if that part is updatable you have indeed a backdoor. In theory it should be possible to make it fixed (which Apple doesn't seem to have done).
  • daeken 11y ago
    Making it fixed just means you can't fix future bugs. The secure approach is to ensure that updates are only possible if the device is either unlocked or wiped completely.
• fixermark 11y ago
  If those software updates force it to erase its private key store, though, then it's functionally isolated from that attack vector. An updated enclave that no longer contains the data of interest has no value.
• sre_ops 11y ago
  That's just plain incorrect. To update code accessing SE one needs to have a phone accept the updates which require having phone in a state equal to owner unlocking the phone.