TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Apple’s Secure Enclave Processor (SEP) Firmware Decrypted

230 pointsby wonderousover 7 years ago

8 comments

runesoerensenover 7 years ago
Previously discussed here <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=15039460" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=15039460</a>
LeoPantheraover 7 years ago
August 18, 2017<p>Also, don&#x27;t be mislead by the headline. To quote a comment on the article:<p>&quot;Imagine the Secure Enclave as a vault. Apple hung a big, dark curtain over it to prevent anyone from even seeing the vault. Now, that curtain has been opened and people can see the vault. The vault, however, is still locked as securely as ever.&quot;
评论 #15779136 未加载
评论 #15780099 未加载
评论 #15780033 未加载
abaloneover 7 years ago
<i>&gt; It’s a black box that we’re not supposed to know anything about</i><p>Nope. Apple published a whitepaper that details how the SEP works.[1] Decrypting the firmware does help researchers look for vulnerabilities in the implementation, but it&#x27;s not like Apple is relying on it being a black box.<p>[1] <a href="https:&#x2F;&#x2F;www.apple.com&#x2F;business&#x2F;docs&#x2F;iOS_Security_Guide.pdf" rel="nofollow">https:&#x2F;&#x2F;www.apple.com&#x2F;business&#x2F;docs&#x2F;iOS_Security_Guide.pdf</a>
评论 #15779665 未加载
LeonMover 7 years ago
How does one find such a key? It&#x27;s my understanding the brute forcing such key would take billions of years on a regular CPU, so can anyone here explain how this was (probably) achieved?
nateberkopecover 7 years ago
The link makes it sound like SEP only handles TouchID - is this true, or does the SEP also deal with passcodes?
评论 #15779286 未加载
评论 #15779276 未加载
hendersoonover 7 years ago
This was actually cracked back in August, and sites quoted Apple as saying they have no plans to fix it, presumably because obscurity is not security and they originally encrypted it because well, why _not_?<p>Ultimately there will be some exposure from this, and they&#x27;ll address each exploit as it comes just like the rest of the system.
runeksover 7 years ago
This is interesting. I hope Apple has some hefty bug bounties on SEP vulnerabilities. I also hope Apple has chosen a sensibly safe language for the SEP firmware code, since correctness is of essential importance here.
评论 #15780903 未加载
log78over 7 years ago
This article is extremely misleading to most people