3 ms·
The iPhone does grant real security, it just requires the user to choose an encryption key that isn't trivially brute forced. (And depending on the circumstance
by sjwright 11y ago
The iPhone does grant real security, it just requires the user to choose an encryption key that isn't trivially brute forced. (And depending on the circumstances, forego use of the fingerprint reader.)
If the dead attacker had a twelve character passphrase, any amount of help from Apple would be utterly useless. Apple could write all the back-doors they liked but if the content is encrypted and the key is unknown, brute forcing is the only option.
The addition of the secure enclave makes it potentially infeasible to extract the UID so that the brute forcing could be performed on a powerful supercomputer. It depends how well the enclave has been hardened against firmware changes. Can the enclave receive a seamless firmware update while in a locked state? Can the enclave firmware be rewritten to output the UID to the main CPU? We don't know.