3 ms·

Is it possible that the enclave is in fact an ASIC with the crypto logic and udid burned into the silicon? That would ensure that it couldn't be updated or comp

Is it possible that the enclave is in fact an ASIC with the crypto logic and udid burned into the silicon? That would ensure that it couldn't be updated or compromised, by Apple or anyone else. This is pretty far outside my area of expertise, so that may be a very dumb question.

awalton 11y ago
It's likely implemented as a part of the System-on-Chip that Apple is using in their phones, yes, either reusing or is very similar to ARM's TrustZone extensions.
- nicolas314 11y ago
  Since the Apple chip is derived from an ARM design it would make sense to have the secure enclave implemented with TrustZone rather than being provided as a separate piece of hardware. Most probably a TEE (Trusted Execution Environment). Lots of TEEs are based on L4.
  - tptacek 11y ago
    Nope, it's a separate core, according to Apple.
    - struct 11y ago
      Educated guess: it may be the application processor also has a trusted execution environment containing stubs that communicate with the Secure Enclave. This would prevent kernel level exploits from writing to the shared memory and mailboxes.