4 ms·
Oh the almighty Secure Enclave, bow down to the Enclave... I see so many comments mentioning Secure Enclave to any security objection as if it's a panacea. Do
by thowawaymom 6y ago
Oh the almighty Secure Enclave, bow down to the Enclave...
I see so many comments mentioning Secure Enclave to any security objection as if it's a panacea. Do you even know what the heck an enclave is and how does it work? It's nuts that when a figure of authority uses a fancy shiny new word to describe some magic black box and the masses follow with no questions asked.
- derefr 6y ago> Do you even know what the heck an enclave is and how does it work? It's a isolated smart-card-like KMS core within the SoC, that has most smart-card guarantees (e.g. no side-channel attacks; tamper-resistance.)
- acdha 6y agoPlease don't spam the same comment
- thowawaymom 6y agoI literally mentioned it one other time as a reply to a comment, that's hardly spam (the m stands for mass, fyi)
- monocasa 6y agoThey've been fairly open about how it works, and since then the binaries have been disassembled and backed up what they were saying. It's a pretty modified L4 (I want to say L4::Pistachio off the top of my head) that for some reason has had Mach-O support added and pretty much just acts as a keystore with a secure but upgradable boot sequence.
- acdha 6y agoYou may not know what it is but it's been well documented for years detailing what it is, what it's used for, and the built-in tamper-resistance features: https://support.apple.com/guide/security/secure-enclave-overview-sec59b0b31ff/1/web/1 https://support.apple.com/guide/security/secure-enclave-over... https://www.apple.com/lae/business/docs/site/iOS_Security_Guide.pdf https://www.apple.com/lae/business/docs/site/iOS_Security_Gu...
- ThePowerOfFuet 6y agoPDF page 8: https://manuals.info.apple.com/MANUALS/1000/MA1902/en_US/apple-platform-security-guide.pdf https://manuals.info.apple.com/MANUALS/1000/MA1902/en_US/app...