4 ms·
If you can destroy the storage encryption key by wiping the Secure Enclave (like during a reset) then unless AES is broken then your data should be safe. Edit:
by goalieca 4y ago
If you can destroy the storage encryption key by wiping the Secure Enclave (like during a reset) then unless AES is broken then your data should be safe.
Edit: I’d love to hear about crazy flaws in this.
- smoldesu 4y agoOn some level, you're right. Anything that isn't a zeroed out drive still contains data on it, though. If, say, Apple kept a copy of your drive key or had a backdoored derivation function, recovering your data would be as simple as a call to Cupertino. Failing that, the adversarial Powers That Be can easily generate a disk image to keep around for when AES is broken (or when it's possible to quickly bruteforce it). This is for people who want to go a step beyond that. The next-best-thing to shredding the disk, you might say.
- altairprime 4y agoThis is fine, and is far less annoying to do. There are no known flaws in that approach, when it’s available. However, as noted in the article, their focus here is exclusively on destroying data when the device is unresponsive and cannot invoke a secure enclave wipe through software means.
- deleted 4y ago[deleted]