3 ms·
"Apple cannot decrypt that data" Right. No doubt true. But there is a catch... and this is a big catch. Even if the key generated on a device lives and dies
by natch 13y ago
"Apple cannot decrypt that data"
Right. No doubt true.
But there is a catch... and this is a big catch.
Even if the key generated on a device lives and dies on a device, it can still be an insecure key if it is generated by an insecure process like concatenating a well-generated but short (low number of bits) key with an escrowed, possibly public-key encrypted, "LEA" (law enforcement access) key.
- szc 13y agoSkipjack is dead, extinct. If this were true, it would be possible to find it by disassembling iOS. There would also be a suspicious "unexplained" payload that accompanied anything that was encrypted with a symmetric key.
- acqq 13y agoInterestingly enough, famous "_NSAKEY" was found only after Microsoft forgot to remove the symbolic debug info of the internal code of the DLLs: http://web.archive.org/web/20000617163417/http://www.cryptonym.com/hottopics/msft-nsa/msft-nsa.html http://web.archive.org/web/20000617163417/http://www.crypton... I believe the second key remained to exist, only as "KEY2"