3 ms·
Since the encryption key is (by design) not extractable from the T2 chip, having raw access to the flash isn't particularly relevant. From a security perspectiv
by angry_octet 8y ago
Since the encryption key is (by design) not extractable from the T2 chip, having raw access to the flash isn't particularly relevant. From a security perspective this is good, because imaging the encrypted disk can also reveal information, and potentially allow replay attacks (like patching the sectors where a password is stored back to a prior version).
https://duo.com/blog/apple-imac-pro-and-secure-storage https://duo.com/blog/apple-imac-pro-and-secure-storage
- rasz 8y agoyou never had raw access to flash, those are NVME(variant specific to apple) drives
- angry_octet 8y agoThey are normal NVME chips, but only connected to the T2 co-processor. If they were connected to the processor then kernel code (and peripherals) could read and write to them directly using PCI.