3

If an iOS device is jailbroken, I understand an attacker cannot extricate key material from the secure enclave. But would they be able to use keys using CryptoKit within the enclave to encrypt a password stored within keychain?

Or do the CrytpoKit APIs perform some sort of system integrity check before accessing the key material in the enclave to check for system compromise?

Improve this question
2
  • Perhaps? Until it was done, it was believed impossible to jailbreak in the first place. If you want a secure device, you don't jailbreak it. Commented Sep 29, 2019 at 22:25
  • It's very difficult to tell what is possible just by looking at the design of an architecture. Looking at some hardware-level attacks, it may be possible information about the key material may be gathered at some point. Commented Sep 30, 2019 at 7:44

0

Reset to default

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.