Comment

Comment by hannibalhorn

According to a former apple engineer that worked on this stuff, the enclave's firmware is indeed a signed blob:

https://twitter.com/JohnHedge/status/699882614212075520

The key thing would be for it to lose all stored keys on update when the current passphase has not been provided, and it sounds like that may not currently be the case.

Maybe in this case, Apple could comply, but a simple tweak would make it impossible in the future?

parent hannibalhorn 10 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton