11.08.2016 Views

Behind the Scenes with iOS Security

2aCt1ji

2aCt1ji

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Filesystem Data Protection<br />

User<br />

Kernel<br />

SEP<br />

open(“foo.txt”, …)<br />

1. Fetch wrapped<br />

file_key from<br />

metadata<br />

HFS<br />

Key Store<br />

2. Unwrap file_key<br />

using keybag key<br />

4. Send IO<br />

command <strong>with</strong><br />

ephemerally<br />

wrapped <br />

file_key<br />

NVME Driver<br />

Clear Text<br />

AES Engine<br />

3. Wrap file_key using<br />

ephemeral_key,<br />

return ephemerally<br />

wrapped file_key <br />

to kernel<br />

Hardware<br />

NAND<br />

Cipher Text<br />

Storage<br />

Controller<br />

Ephemeral Key<br />

established on boot

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!