Re:Checkm8 – Bootrom exploit for many iOS devices
by mschuster91 on Friday September 27, 2019 @10:09AM
(#21092168)
The SE will still require a password or other authentication data (e.g. iris/finger print, biometric measurements) until it will use its key to decrypt the data.
The only ways around this are:
* physical extraction of the embedded memory in the SE (I'm not sure if this is actually feasible, it's certainly a destructive attack)
* "updating" the SE firmware - this is what the FBI wanted Apple to do in that terrorism case, that Apple develop a SE firmware that leaks the secret key
* exploiting bugs in the SE firmware - this is what the FBI ended up doing by hiring either Cellebrite or some anonymous hackers (depending on which source one believes).
Re:Checkm8 – Bootrom exploit for many iOS devices
by btbuilder on Friday September 27, 2019 @10:31AM
(#21092401)
I see. Hence evil maid attack. If someone has temporary physical access they could install malware that captures data when the device is unlocked. Chargers as an attack vector seem more likely, if more mundane.
Re:Checkm8 – Bootrom exploit for many iOS devices
by als0 on Friday September 27, 2019 @11:57AM
(#21093336)
In the case of malicious chargers I believe Apple already authenticates peripherals to make data capture more difficult. If you’re unauthenticated then you will not be able to do much unless explicitly authorised.
Of course, none of that matters if you can reflash the device or exploit the boot ROM.
What prevents unauthorized firmware from requesting that the Secure Enclave decrypt all data? Similar to having control over an HSM - you can’t extract the key but you can perform cryptographic operations.