4 ms·
Which part? Apple is already using the secure enclave for key derivation, PIN/password rate limiting etc. (that’s what it’s for), but my point is that there’s
by lxgr 2y ago
Which part?
Apple is already using the secure enclave for key derivation, PIN/password rate limiting etc. (that’s what it’s for), but my point is that there’s currently a gap in that you can often not really know if you are actually talking to the secure enclave or OS-level malware.
- saagarjha 2y agoSecure PIN entry
- lxgr 2y agoHow? The secure enclave doesn't have any trusted input/output capabilities other than the power button double click and biometrics. The PIN isn't entered via these.
- hedora 2y agoAlso, can't you just get the pin from the accelerometer? (It may take a few tries, but this was shown by academics a while back.)
- saagarjha 2y agoMy understanding is that sensors are disabled during this
- saagarjha 2y agoThere’s a thing which I know very little about personally but have hearsay of its existence where it rips control from XNU and takes over touch input for this