4 ms·
> The best you can do is use the SE to decrypt the key and then use the clear text key for encryption/decryption. AFAIK this is what "secretive" was doing all
by big-and-small 11mo ago
> The best you can do is use the SE to decrypt the key and then use the clear text key for encryption/decryption.
AFAIK this is what "secretive" was doing all the time.
- lxgr 11mo agoI'm pretty sure it creates SE resident keys, which can't be unwrapped by either userspace or the macOS kernel.
- big-and-small 11mo agoThen I'm wrong.
- cyberax 11mo agoI certainly remember that they had support for the resident keys, with all the limitations.