Re:A Message to Our Customers
by schrodinger on Wednesday February 17, 2016 @06:25AM
(#11117071)
It sounds like it is built into hardware with newer iPhones containing the secure enclave, but not for an older phone like the iPhone 5C.
[ Parent
| on HN ]
It's not really built into ‘hardware’, it's enforced by the Secure Enclave, which is software-based and accepts software updates signed by Apple. It's secure against kernel exploits and third-parties, but not against Apple.
I'm really interested to know more about this. Does TouchId secure enclave really enforce the password attempt limits?
Yes, see page 12 here https://www.apple.com/business/docs/iOS_Security_Guide.pdf