News for hackers. Stuff that matters.
Re:iPhone 15 Teardown Reveals Software Lockdown by friendzis on Tuesday September 26, 2023 @03:16AM (#37655606)
> Biometrics need to be evaluated on a separate computer for security reasons.

But why? What's the algorithm/architecture here? I am genuinely curios here.

I guess we can generalize finger/face readers as multichannel cameras. What do you gain by computing a "hash" of the data (and the associated machinery to send that hash securely) versus simply sending raw data for evaluation at CPU level? In the end the CPU has to trust the data sent by peripheral anyway.

I understand the use of separate compute unit when extraction of secrets must be protected, but in this case it is the CPU that protects those secrets anyway.

Re:iPhone 15 Teardown Reveals Software Lockdown by justincormack on Tuesday September 26, 2023 @04:09AM (#37656029)
The validation is done outside the CPU I believe too, that’s certainly what happens with the fingerprint reader. I think the process is documented in the secure enclave white paper