#ios#secureenclave#icloudkeychain
281K subscribers • 47 videos on Hallway • Conference channel
Advanced. Deep dive for people who know the field.
126K views10 years ago9 recommendations
SecurityMobile developmentiOS and SwiftUICryptographyWeb and application security
Ivan Krstic explains the cryptographic design and implementation of iOS security mechanisms including HomeKit, Auto Unlock, and iCloud Keychain.
by Ivan Krstic With over a billion active devices and in-depth security protections spanning every layer from silicon to software, Apple works to advance the state of the art in mobile security with every release of iOS. We will discuss three iOS security mechanisms in unprecedented technical detail, offering the first public discussion of one of them new to iOS 10. HomeKit, Auto Unlock and iCloud Keychain are three Apple technologies that handle exceptionally sensitive user data – controlling devices (including locks) in the user's home, the ability to unlock a user's Mac from an Apple Watch, and the user's passwords and credit card information, respectively. We will discuss the cryptographic design and implementation of our novel secure synchronization fabric which moves confidential data between devices without exposing it to Apple, while affording the user the ability to recover data in case of device loss. Data Protection is the cryptographic system protecting user data on all iOS devices. We will discuss the Secure Enclave Processor present in iPhone 5S and later devices and explain how it enabled a new approach to Data Protection key derivation and brute force rate limiting within a small TCB, making no intermediate or derived keys available to the normal Application Processor. Traditional browser-based vulnerabilities are becoming harder to exploit due to increasingly sophisticated mitigation techniques. We will discuss a unique JIT hardening mechanism in iOS 10 that makes the iOS Safari JIT a more difficult target.What people say. Recommended as an exceptionally detailed look at iOS security, the Secure Enclave, and iCloud Keychain encryption.
karlsheaon Hacker News • Recommends
On “Apple, in Sign of Health Ambitions, Adds Medical Records Feature for iPhone”
karlsheaon Hacker News • Recommends
On “Apple, in Sign of Health Ambitions, Adds Medical Records Feature for iPhone”
Twisellon Hacker News • Recommends
On “Ask HN: How comfortable do you feel using cloud-based password managers?”
dilippkumaron Hacker News • Recommends
On “Apple confirms it's breaking iPhone web apps in the EU on purpose”
jesseendahlon Hacker News • Recommends
On “UK backing down on Apple encryption backdoor after pressure from US”
eddygon Hacker News • Recommends
On “Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops”
eddygon Hacker News • Recommends
On “MS confirms it will give the FBI your Windows PC data encryption key if asked”
arkadiyton Hacker News • Recommends
On “The limitations of Android N Encryption”
abaloneon Hacker News • Recommends
On “Apple moves to store iCloud keys in China, raising human rights fears”
xmodemon Hacker News • Recommends
On “Apple iMac Pro and Secure Storage”
ghostpepperon Hacker News • Recommends
On “FBI tells lawmakers it can't access Dayton gunman's phone”
eddygon Hacker News • Recommends
On “Luxury Surveillance”
jesseendahlon Hacker News • Recommends
On “Tailscale doesn't want your password”
tedmistonon Hacker News • Mentions
On “iPhone 7”
IBMon Hacker News • Mentions
On “Chinese authorities detain Apple employees suspected of selling customer data”
Shankon Hacker News • Mentions
On “Our Approach to Privacy”