<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div></div><div><br></div><div><br>On Mar 1, 2016, at 2:48 AM, Jerry Leichter <<a href="mailto:leichter@lrw.com">leichter@lrw.com</a>> wrote:<br><br></div><blockquote type="cite"><div><blockquote type="cite"><span>Just posted this, targeted more towards the general public than the people on this list, but I would appreciate feedback (and maybe an upvote on Hacker News):</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span><a href="http://blog.rongarret.info/2016/02/the-fbi-can-almost-certainly-crack-san.html">http://blog.rongarret.info/2016/02/the-fbi-can-almost-certainly-crack-san.html</a></span><br></blockquote><span>Sigh. This has become a meme so quickly, and it's just wrong.</span><br><span></span><br><span>You can clone the memory chip of an iPhone. But even in the iPhone 5C in question, that doesn't give you the chip UUID, which is embedded in the processor - which provides no way to read it. Without the UUID, knowing the lock code doesn't tell you the encryption key.</span><br></div></blockquote><div><br></div><div><br></div><div><div><span style="background-color: rgba(255, 255, 255, 0);">from the blog post. </span></div><div><blockquote type="cite"><font color="#000000"><span style="background-color: rgba(255, 255, 255, 0);">Cracking a secure enclave requires actually getting inside the processor chip itself, a process known as <a data-jsbanchorprepared="bbj2WJT52Otb7SL" href="https://www.google.com/search?client=safari&rls=en&q=decapping+a+chip&ie=UTF-8&oe=UTF-8" rel="noreferrer" style="text-decoration: none;">decapping</a>. That's possible too (the NSA can probably do it) but it's much, much harder and requires very expensive and specialized (and probably classified) equipment.<br></span></font></blockquote></div><span style="background-color: rgba(255, 255, 255, 0);"><br></span><div><span style="background-color: rgba(255, 255, 255, 0);">In 2004ish I visited the UCL Crypto lab where this exact set of equipment is used to remove secrets from many types of powered off devices, chips, etc. Yes, the equipment is expensive but not beyond a university.</span></div></div><div><br></div><div><br></div></body></html>