Hacker Hacked Secure Enclave Decryption Key Of Apple's iPhone - TechnoExploit

Breaking

Post Top Ad

Post Top Ad

Sunday, August 20, 2017

Hacker Hacked Secure Enclave Decryption Key Of Apple's iPhone

                              
                              Hacker Hacked the secret code of Secure Enclave Processor. The chip handles all the security-related tasks on iDevices and prevents the CPU from accessing sensitive data. 

 A hacker who goes by the name "xerub" on Twitter and GitHub posted the key on Twitter and to the iPhone Wiki, a community website that documents technical information on Apple's iPhone:twitter.com/xerub/status/897896081874329600.
https://twitter.com/xerub/status/897896081874329600
 
Apple's Secure Enclave, an ARM-based coprocessor used to enhance iOS security, became a bit less secure on Thursday with the publication of a firmware decryption key. This Secure Enclave Processor(SEP) uses for security purpose introduced in  Apple's iPhone 5S. The SEP is an another coprocessor is seperate from main processor of the device it prevents security through Fingerprint sensor.


Secure enclave will have encryption and decryption. The finger print sensor captures finger through touch id  and verifies the finger from fingerprint sensor. If fingerprint matches we can unlock the phone. 
 


Apple Spoke person speaks  the release of the SEP key doesn't directly compromise customer data. "There are a lot of layers of security involved in the SEP, and access to firmware in no way provides access to data protection class information."
 
One of the ways the SEP does this is by generating a Unique ID (UID) for each device for authentication purposes. The UID automatically changes every time a device is rebooted and remains unknown to other parts of the system, further enhancing its security.  
 
"This key being available does not reduce security of the Secure Enclave in any way," said Strafach. Secure Enclave has the main task of protecting sensitive content, but the firmware decryption key is more comparable to ‘obfuscation’ rather than anything related to protection of the actual content stored.”
 
 That doesn’t mean your iPhone 5s is less secure. But this even opens the door to anyone experienced enough to dig through the firmware. It’s also worth noting the “hack” only applies to the iPhone 5s.

No comments:

Post a Comment

Post Top Ad