2 ms·
You get 10 tries and then it's wiped from the cloud. [1] Obviously this depends on you trusting that the HSMs function as Apple says they do and that it's thei
by brigade 5y ago
You get 10 tries and then it's wiped from the cloud. [1]
Obviously this depends on you trusting that the HSMs function as Apple says they do and that it's their public key that you're additionally encrypting the keychain's key with. [2]
[1] https://support.apple.com/guide/security/escrow-security-for-icloud-keychain-sec3e341e75d/web https://support.apple.com/guide/security/escrow-security-for...
[2] https://support.apple.com/guide/security/secure-icloud-keychain-recovery-secdeb202947/web https://support.apple.com/guide/security/secure-icloud-keych...
- xvector 5y agoThis is kind of terrible as it relies on an authentication barrier as opposed to a cryptographic one. No one can reasonably call this E2EE. I really would have expected better security engineering from Apple, wow. Not that it matters, since barely anything of value is E2EE to begin with. Thanks for the sources.