5 ms·
My inner skeptic says if you have enough money and demand for phone decryption that is using a low-entropy key; your best bet is to take a dump of the phone NVR
by altmind 7y ago
My inner skeptic says if you have enough money and demand for phone decryption that is using a low-entropy key; your best bet is to take a dump of the phone NVRAM and feed it to inhouse iphone emulator, brute-forcing the key in parallel, without any lockouts. Their product may be an ios emulator.
- jrpt 7y agoThe Secure Enclave should protect against that type of attack. And why would you assume it is a low entropy key? Also, my iPhone is autocorrecting Secure Enclave to capitalize it for some reason. You should probably read this before believing your “inner skeptic” https://www.apple.com/business/docs/site/iOS_Security_Guide.pdf https://www.apple.com/business/docs/site/iOS_Security_Guide....
- 05 7y agoThere's an individualized (unique per device) embedded cryptographic key in each Apple processor, emulator solves nothing on that front.