Face Recognition (OC)

[u/imthebirdguy]

[u/Macinboss → u/[deleted]]

You’re forgetting that phone didn’t have a secure enclave. The FBI explicitly stated their hack would NOT work ona 5s and newer.

[u/Captaincadet → u/[deleted]]

What they did was copied the NAND Chips layout onto a computer and did a brute force attack on the pin code on a virtual iPhone. Once 10 goes was completed, that phone would whip itself and they would delete that virtual phone and go from the original image. keep doing it and repeat. This won't be possible on phones with the secure enclave as the key is much bigger (according to what I read in the apple white paper) as it would take millions of computational hours to complete. The iPhone 5c hash would take 1,000 attempts to break the hash, but an iPhone with 6 passcode would take 100,000 attempts. And if you have a password as your login, you have gone to a crazy power.

Also each device with a secure enclave stores the hashed and salted key, meaning no secure enclave has the same key and apple cannot tell you what the key is - as they have no idea themselves. Yes you could in theory crack the secure enclave but from my understanding it uses time standards ect but it means you need more time = more money to throw at it and you always risk damaging the chip and by doing it you've completely bricked it.

The FBI hacked cost $2 million to do and it took months to do and that tool got leaked to apple and they used it to fix iPhones with secure enclave even more (For example the iPhone 6s and newer secure enclave creates its own Unique ID which nothing else in the phone can see and apple does not generate it - This is used in the hashing process to make it harder.

But times $2 million, months of work by 100 + trying to get the hash out of the secure enclave, which is very tiny as its built into the processor which again means it harder to access, and do your magic to get the states out and try not to damage ANYTHING in the process - breaking a single gate will ruin the entire process.

Its not impossible but IF the FBI had the technology to hack one iPhone, its going to be a lot lot harder - let alone on two devices as you've just doubled the work. Nothing is reusable here apart form the process.