4 ms·

> A court order could tell whoever holds those signing keys to sign something to decrypt all messages No, I'm not a lawyer but my understanding is that this is

• lrvick 3y ago
  You do not have to incriminate yourself under US law, but corporate property is not the same as personal property. The NSA very likely could compel Apple to give up their signing keys if it came with an executive order citing national defense objectives... or more probably they will just manipulate the RNGs of the HSMs Apple uses, or get a special contract with their supplier, or bribe a release engineer. I know people who have been party to such arrangements first hand. Any system that relies on a single private key with SPOFs in the supply chain should be considered compromised, if the targets it governs are high value. The CCP did not need to do anything cloak and dagger and simply mandated overt access to Apples HSMs for chinese users.