Hackers Found An Unpatchable Weakness In A Security Feature That Has Protected Apple Users For Years
Dhir Acharya - Aug 05, 2020
Even iPhone users may haven’t of this term, but Apple has a padlock that protects almost all of its products called the Secure Enclave.
- Apple Kills Original HomePod, Focusing On HomePod Mini
- iPhone 12 Color Is Fading Away Quickly And No One Knows Why
- Apple Sues Ex-Employee For Stealing Company’s Secrets To The Media
Even iPhone users may haven’t of this term, but Apple has a padlock that protects almost all of its products called the Secure Enclave. The tech giant described the feature as a secure coprocessor consisting of a hardware-based key manager that’s isolated from the main processor, providing an additional security layer.
![Security Enclave](https://img.mobygeek.com/resize/730x-/2020/08/05/webp-compressed-9c41.jpg)
This feature is used on many models of the iPad, iPhone, Apple Watch, Mac, Apple TV, and HomePod product lines. All the data on such devices is encrypted with random private keys that can only be accessed through the Secure Enclave. Then, the coprocessor stores the keys that manage sensitive data like passwords. The company writes:
“The Secure Enclave also maintains the integrity of its cryptographic operations even if the device kernel has been compromised. Communication between the Secure Enclave and the application processor is tightly controlled by isolating it to an interrupt-driven mailbox and shared memory data buffers.”
Simply speaking, here’s how the Secure Enclave works, when storing a private key in the hardware, you don’t directly deal with the key. In fact, the Secure Enclave is assigned to generate the key, store it securely, and perform operations with it. Eventually, you receive the output of this process only, making it extremely difficult for the key to be compromised.
![Security Enclave](https://img.mobygeek.com/resize/730x-/2020/08/05/macos-mojave-ios-12-macbook-ipad-pro-iphone-x-itun-ac5a.jpg)
However, hackers have made a lot of attempts to compromise the key for a long time. In 2017, a group of hackers was able to decrypt the Secure Enclave firmware but they couldn’t access the private keys, so users remain safe.
Unfortunately, a group of Chinese hackers named Pangu Team has found the hardware’s weakness that could allow them to decrypt the private security keys, according to 9to5Mac. With this unpatchable exploit, Apple users now have a reason to worry about their privacy and security.
The exploit in the hardware instead of the software, so Apple cannot fix it remotely with a patch as it does with bugs. So far, there haven’t been any details revealed regarding what the hackers may do with this exploit but they would likely need physical access to a device to make it happen.
So, for now, at least Apple users can hope that as long as they keep their devices secure. Never leaving their eyesight, they will be safe.
>>> Hackers Reportedly Earn 120,000$ From Hacking Major Twitter Accounts
Featured Stories
![PDF Prodigy: Expert Techniques for Editing](https://img.mobygeek.com/crop/320x180/photo_galleries/2024/01/18/pdf-6fd5.png)
ICT News - Jan 18, 2024
PDF Prodigy: Expert Techniques for Editing
![The Psychology of Casino Game Design](https://img.mobygeek.com/crop/227x128/2023/08/03/casino-india-89d9.jpg)
ICT News - Aug 03, 2023
The Psychology of Casino Game Design
![3 Reasons your privacy gets compromised online](https://img.mobygeek.com/crop/227x128/2022/05/17/hacker-9565.jpg)
ICT News - May 17, 2022
3 Reasons your privacy gets compromised online
![Apple Devices For Sale](https://img.mobygeek.com/crop/227x128/2022/05/11/96174530-5607-11ec-9bbc-ba5fcc880a33-cf-4827.jpg)
ICT News - May 11, 2022
Apple Devices For Sale
![Pin-Up Review India 2022](https://img.mobygeek.com/crop/227x128/2022/04/12/pexels-andrea-piacquadio-3768128-05c6.jpg)
ICT News - Apr 12, 2022
Pin-Up Review India 2022
![Choosing between a shared and a dedicated server for gaming](https://img.mobygeek.com/crop/227x128/2022/03/29/pexels-field-engineer-442150-df92.jpg)
ICT News - Mar 29, 2022
Choosing between a shared and a dedicated server for gaming
![How The Internet Came Into Being](https://img.mobygeek.com/crop/227x128/2022/03/18/pexels-andrea-piacquadio-914931-4083.jpg)
ICT News - Mar 18, 2022
How The Internet Came Into Being
![The Best Gaming Tech of 2022](https://img.mobygeek.com/crop/227x128/2022/03/17/florian-olivo-mf23rf8xary-unsplash-7b61.jpg)
ICT News - Mar 17, 2022
The Best Gaming Tech of 2022
![Technologies that enable the development of online casinos with live dealers](https://img.mobygeek.com/crop/227x128/2022/02/16/istockphoto-1200707009-612x612-f9fa.jpg)
ICT News - Feb 16, 2022
Technologies that enable the development of online casinos with live dealers
![Remember These Safety Measures While Playing at an Online Casino](https://img.mobygeek.com/crop/227x128/2022/02/08/pexels-photo-3279685-8114.jpeg)
ICT News - Feb 08, 2022
Comments
Sort by Newest | Popular