News for hackers. Stuff that matters.

A comment on A Message to Our Customers. Parent comment

Re:A Message to Our Customers by sametmax on Wednesday February 17, 2016 @09:05AM (#11117883)
They are, but apple have the keys : https://thehackernews.com/2016/01/apple-icloud-imessages.htm...

So basically, they could be in clear text, it's pretty much the same.

[ Parent | on HN ]
Re:A Message to Our Customers by niij on Wednesday February 17, 2016 @11:09AM (#11118780)
Please see this link[1], Apple explains exactly how keys are stored in their datacenters (Hint: it is not in clear text). They use HSM's which destroy the user's key after 10 failed attempts.

[1]: https://www.apple.com/business/docs/iOS_Security_Guide.pdf

[ Parent | on HN ]
Re:A Message to Our Customers by snuxoll on Wednesday February 17, 2016 @11:42AM (#11119081)
This is only for Keychain escrow, device backups are not protected by HSM's.
[ Parent | on HN ]