11.08.2016 Views

Behind the Scenes with iOS Security

2aCt1ji

2aCt1ji

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Userspace<br />

UserEventAgent<br />

Darwin lock/unlock<br />

Notifications<br />

SpringBoard<br />

MobileKeybag.framework<br />

1) pressing home button starts Touch ID sensor<br />

7) send unlock notification<br />

XNU (Kernel)<br />

AppleKeyStore<br />

SEP endpoint to SKS<br />

AppleMesa<br />

SEP endpoint to SBIO<br />

4) decrypt<br />

master key<br />

random secret<br />

master key<br />

SKS<br />

SBIO<br />

bio memory<br />

Touch ID<br />

Sensor<br />

2) template match sent to SBIO<br />

SEP<br />

master key<br />

random secret<br />

SKS memory<br />

master key + SEP UID<br />

class A<br />

class B (priv)<br />

class C<br />

SKS keyring<br />

class A<br />

class B (priv)<br />

class B (public)<br />

class C<br />

class D<br />

3) upon successful match send<br />

random secret to SKS<br />

6) securely destroy master key<br />

5) decrypt class keys, add to keyring<br />

Touch ID unlock

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!