Hacker has decrypted Apple's Secure Enclave Processor firmware

Several reports show that a hacker who σαν ψευδώνυμο το “xerub” κατάφερε να αποκρυπτογραφήσει το Secure Enclave Processor firmware (SEP) της Apple και δημοσίευσε την Πέμπτη το κλειδί αποs.

Secure Enclave Processor (SEP) is a feature on the A7 chipset that powers the iPhone 5, iPad Air, iPad mini 2, and iPad mini 3 as well as any Apple A series processor.Chippers

It is capable of managing its functions touch ID, the cryptographic functions of Apple Watch Series 2 smartwatches, passcode verifications and other security-related processes.

SEP is encrypted by the design and is completely isolated, which means it can not be tampered with.

"THE forwards the data to the Secure Enclave but cannot read it. They are encrypted and authenticated with a session key that is negotiated using the shared device key provided for the Touch ID sensor and Secure Enclave,” Apple says.

The decryption key will not allow hackers to access stored data.

The hacker announced in his Twitter account that he was able to decipher Apple's Secure Enclave Processor (SEP) using the img4lib library, which can deal with img4 files, along with a SEP firmware splitter designed to handle decrypted files.

And tools were developed by the hacker and are available on GitHub for security researchers who want to try to decrypt Apple's SEP firmware to find vulnerabilities. However, these tools will not allow them to access the data stored in the SEP.

Below you can see the security architecture diagram of Apple's iOS mobile operating system to understand how its security system works. The hacker said the decryption key is "fully deployed" and that you can download the required tools from the links below.

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.087 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).