A Message to Our Customers

Re:A Message to Our Customers by sametmax on Wednesday February 17, 2016 @08:58AM (#11117844)

Exactly. Plus, all backups of the iphones on icloud are already unencrypted, so half of the phones are already indirectly unlocked.

EDIT: backups are encrypted, but apple have the keys. See below.

[ Parent | on HN ]

Re:A Message to Our Customers by kimolas on Wednesday February 17, 2016 @09:00AM (#11117858)

iCloud backups are 100% encrypted. Only some iTunes backups are not, and only if the option to use encryption to protect the backup is not selected.

[ Parent | on HN ]

Re:A Message to Our Customers by sametmax on Wednesday February 17, 2016 @09:05AM (#11117883)

They are, but apple have the keys : https://thehackernews.com/2016/01/apple-icloud-imessages.htm...

So basically, they could be in clear text, it's pretty much the same.

[ Parent | on HN ]

Re:A Message to Our Customers by niij on Wednesday February 17, 2016 @11:09AM (#11118780)

Please see this link[1], Apple explains exactly how keys are stored in their datacenters (Hint: it is not in clear text). They use HSM's which destroy the user's key after 10 failed attempts.

[1]: https://www.apple.com/business/docs/iOS_Security_Guide.pdf

[ Parent | on HN ]

Re:A Message to Our Customers by snuxoll on Wednesday February 17, 2016 @11:42AM (#11119081)

This is only for Keychain escrow, device backups are not protected by HSM's.

[ Parent | on HN ]