Except that the FBI can’t ask Apple for the private keys because they don’t have them; they never leave the device, which is the whole point [1]. Knowing they

Except that the FBI can’t ask Apple for the private keys because they don’t have them; they never leave the device, which is the whole point [1]. Knowing they can’t get the private keys, the FBI wants to confront a suspect and grab the unlocked iPhone out of his/her hand. If you think you’re going to have your iPhone taken by law enforcement, there’s a quick way to lock it [2]. When a user turns on iMessage on a device, the device generates encryption and signing pairs of keys for use with the service. For encryption, there is an encryption RSA 1280-bit key as well as an encryption EC 256-bit key on the NIST P-256 curve. For signatures, Elliptic Curve Digital Signature Algorithm (ECDSA) 256-bit signing keys are used. The private keys are saved in the device’s keychain and only available after first unlock. The public keys are sent to Apple Identity Service (IDS), where they are associated with the user’s phone number or email address, along with the device’s APNs address. [1]: https://support.apple.com/en-nz/guide/security/secd9764312f/web https://support.apple.com/en-nz/guide/security/secd9764312f/... [2]: “How to Temporarily Disable Face ID or Touch ID, and Require a Passcode to Unlock Your iPhone or iPad”— https://daringfireball.net/2022/06/require_a_passcode_to_unlock_your_iphone https://daringfireball.net/2022/06/require_a_passcode_to_unl...