You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
iCloud Keychain Backup<br />
Backend attack surface<br />
In naive implementation, backend could brute force <strong>the</strong> iCSC to access escrow key<br />
Just like <strong>with</strong> SEP, need to enforce policy over escrow key<br />
No brute–force—Want hard limit on escrow recovery attempts under adversarial cloud<br />
What if escrow key unwrapping only took place in Hardware <strong>Security</strong> Modules?