Re:A Message to Our Customers
by kevinchen on Monday February 22, 2016 @05:31PM
(#11154854)
Yes, if you could recover the SE key (or factory-burned SoC key for older phones), you could crack the passcode on your own cluster rather than being limited to what the phone hardware/software can do.
[ Parent
| on HN ]
> for older phones
To my knowledge, all keys are still wrapped with the UID, and the UID is still a factory-burned SoC key (not accessible to any firmware). Possible to extract, but not easy to do at scale.