3 ms·
The security architecture described here seems pretty clever. Is this degree of security unique across mobile devices? If the phone in question was from a diffe
by growlix 11y ago
The security architecture described here seems pretty clever. Is this degree of security unique across mobile devices? If the phone in question was from a different manufacturer or ran a different OS, would the FBI have to ask its creator for help?
- pas 11y agoChrome OS was already doing chain of trust booting when it was first announced/revealed/open-sourced, but with maybe a hardware switch to enable flashing other loaders. (Since then that has been probably removed.) There are Android full disk encryption schemes, and of course phones with signed bootloaders. https://nerdland.net/unstumping-the-internet/pattern-unlock-after-android-full-device-encryption/ https://nerdland.net/unstumping-the-internet/pattern-unlock-... http://www.extremetech.com/mobile/216560-android-6-0-marshmallow-makes-full-disk-encryption-mandatory-for-most-new-devices http://www.extremetech.com/mobile/216560-android-6-0-marshma... What Apple did that was so valuable is providing a very clear, almost abstract implementation, from scratch, hitting every point along the way (randomized device private keys, read and execute only Secure Enclave, signed loaders, proper AES(-XTS?) full disk encryption, probably also requiring strong a password too, full lock after ~48 hours - sure, it'd be good if this could be customized to something lower).