3 ms·
When IOS 6.1.4 gets pushed to your iPhone in the future, consider how difficult it would be for Apple to add code that copies your privately generated keys back
by Nrsolis 14y ago
When IOS 6.1.4 gets pushed to your iPhone in the future, consider how difficult it would be for Apple to add code that copies your privately generated keys back to Apple for "key-escrow purposes".
- __david__ 14y agoUp-thread there is a claim that the keys are embedded in the processor during manufacture and cannot be read.
- Nrsolis 14y agoThat's a claim that hasn't been independently verified. Absent such proof, I'd expect there to be a ready mechanism to get key material off the chip. Even if the claim is correct, there is no guarantee that the implementation that does use the key material can use it in a way that doesn't reveal the key in another way. Other supposedly secure key storage mechanisms have had disappointingly little luck against determined attackers. Ask any cryptographer about attacks that reveal key info in deployed and implemented crypto-systems.
- nthj 14y agoI'm doing my best to track this conversation, but it's a bit over my head. So say the key cannot be read. What is to prevent Apple from delivering an iMessage software update which just POSTs each message to api.nsa.gov/warrants? If I can copy-paste an iMessage, it's getting turned into plain text at some point...