11.08.2016 Views

Behind the Scenes with iOS Security

2aCt1ji

2aCt1ji

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

iCloud Keychain Backup<br />

Backend attack surface<br />

In naive implementation, backend could brute force <strong>the</strong> iCSC to access escrow key<br />

Just like <strong>with</strong> SEP, need to enforce policy over escrow key<br />

No brute–force—Want hard limit on escrow recovery attempts under adversarial cloud<br />

What if escrow key unwrapping only took place in Hardware <strong>Security</strong> Modules?

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!