4 ms·
4) The process for accessing the data on a specific device becomes simple - law enforcement needs to be in possession of (A) the device and (B) a court order. A
by danieldk 11y ago
4) The process for accessing the data on a specific device becomes simple - law enforcement needs to be in possession of (A) the device and (B) a court order. Apple will decrypt the key if forced by court order.
I think, we can assume that up till now, Apple has its private keys protected on some disconnected machine in a HSM, perhaps multiple HSMs, that are only accessible with very restricted access. When there is a gold iOS build, some of the key personal will go through a security procedure to get the build signed.
Now suppose that such a procedure is put in place. And you get requests from US courts and Western European courts[1]. Once it's there, there will probably be hundreds, perhaps thousands of daily requests. It suddenly becomes undoable to keep the same security procedures. More people need access to the master key to handle all the requests for which there is a court order. Or even worse: there has to be an semi-automated procedure to handle such requests.
In any case, any such procedure will weaken the security of iOS devices significantly. Since Apple's master key is so extremely valuable, it will be an extremely attractive target for attacks (in the semi-automatic scenario); or it's easier to find a corrupt person to leak the keys.
Since people store anything from personal photos, access to bank accounts, to business plans on their phones, we should move into the direction of making crypto systems stronger, not intentionally weakening them.
[1] Let's avoid the slippery slope that this would trigger for not-so-nice regimes for a moment. Although, once such a backdoor is there, it will happen.
- m_mueller 11y agoI concede, these are good points. I'd like to add though, that it would be better overall to have a solution that at least tries to limit access to specific devices, rather than Apple being forced by the government to build in general backdoors. But I can't really think of a better solution. Maybe have a hierarchy of keys, one per some serial number suffix, each in different servers in different buildings and accessed by different people, so if one gets lost it at least only affects a fraction of devices on the market?
- danieldk 11y agoI think that we as a society (though I am not American) should decide first whether we think backdoors for court orders are worth the risk at all. Let's be honest with ourselves, the chance to be killed by terrorists is minuscule compared to other factors that are under human control (air pollution, traffic incidents, homicides). If you are looking at non-terrorist criminal activity, one has to wonder if you don't have more serious problems than unlocking a bunch of iPhones when your homicide rates[1] or traffic-related deaths[2] are higher than nearly any other Western country. Terrorism and crime are just easy distractions to get more power. [1] https://en.wikipedia.org/wiki/List_of_countries_by_intentional_homicide_rate https://en.wikipedia.org/wiki/List_of_countries_by_intention... [2] https://en.wikipedia.org/wiki/List_of_countries_by_traffic-related_death_rate https://en.wikipedia.org/wiki/List_of_countries_by_traffic-r...
- deleted 11y ago[deleted]
- specialist 11y agoHSM - Hardware Security Module? https://en.wikipedia.org/wiki/Hardware_security_module https://en.wikipedia.org/wiki/Hardware_security_module