3 ms·
The 5C does not have a secure enclave, however the 5C still has the device UID burned into hardware. As I understand it, for an offline attack on the encrypted
by Crito 11y ago
The 5C does not have a secure enclave, however the 5C still has the device UID burned into hardware.
As I understand it, for an offline attack on the encrypted contents of the flash, you would need that UID.
- Zigurd 11y agoI should have been more specific: The iPhone 5C does require signed system software, and the system software enforces safeguards on key access. In contrast, on the iPhone 6, it may not be the case that an "evil update" of system software could be sufficient to subvert the ways keys that are already stored in the hardware secure enclave are protected, and you would have to try to probe the hardware.