← Back to context

Comment by bitpush

12 hours ago

Could it be that this process needs to be running in a secure enclave

No, not at all. Someone even implemented AirDrop in Python before[1]. In fact, nothing ever needs such special hardware. It's a decision of the implementer if they'd like to get fancy and rely on such hardware in their implementation to change its security profile, but the iPhone at the other end or any Apple infrastructure would be none the wiser - they just see that they're getting appropriately signed or encrypted, and neither knows nor cares how that came to be. Use of a hardware security module would just make the process more tamper resistant but would not otherwise change the outcome.

1. https://github.com/seemoo-lab/opendrop

  • Relies on OWL which does have specific hardware requirements

    • No, OWL only appears to have specific driver requirements, namely that they expose to userspace functionality that any remotely modern WiFi chip should already have.