News for hackers. Stuff that matters.

A comment on Apple introduces end-to-end encryption for backups. Parent comment

Re:Apple introduces end-to-end encryption for backups by dgdfhdfhj on Wednesday December 07, 2022 @04:05PM (#33900238)
> As it is, my iPhone unlock PIN is everything that's needed to decrypt the data server-side

That's not quite true. They use a HSM on their datacenters, which only allows a limited amount of guesses. They only allow a limited amount of guesses, before your data is wiped forever[1].

[1] https://blog.cryptographyengineering.com/2021/03/25/whats-in...

[ Parent | on HN ]
Re:Apple introduces end-to-end encryption for backups by rogers18445 on Wednesday December 07, 2022 @09:18PM (#33903262)
Technically, the keys are in the processor's state. You are just trusting that it won't divulge the keys without a correct PIN. You are also trusting the processor is properly secured. And you are trusting that no one would go through the effort to extract the keys physically with scanning probe microscopy or something.
[ Parent | on HN ]