That's a big ask. Probably only work the few hundred it'd take to do that, then get the data off it, if you had some super important documents // crypto wallet.
Is it really? In China you can upgrade your iPhone storage this way. Sure it's not for your average phone case store, but it's not exactly rocket science either.
Unfortunately not really a lot of places to do this in the US. And unlike shipping new devices from China to US, shipping used devices from US to China and back is prohibitively expensive.
The backup would live someplace other than on the broken machine. It would be encrypted some other way (or maybe not at all, depending on threat profile).
No point in encrypting those family photos burned to disc.
All the data is encrypted and the key is held inside the secure enclave within the CPU. If the CPU fails then the data is unrecoverable.
That's a big ask. Probably only work the few hundred it'd take to do that, then get the data off it, if you had some super important documents // crypto wallet.
Is it really? In China you can upgrade your iPhone storage this way. Sure it's not for your average phone case store, but it's not exactly rocket science either.
Unfortunately not really a lot of places to do this in the US. And unlike shipping new devices from China to US, shipping used devices from US to China and back is prohibitively expensive.
Key is held on a separate chip unfortunately
encrypted by both a boot password and a secure enclave held key
Are you suggesting that both keys should be required for decryption?
How would you restore the backup if your secure hardware device is lost/stolen/damaged?
The backup would live someplace other than on the broken machine. It would be encrypted some other way (or maybe not at all, depending on threat profile).
No point in encrypting those family photos burned to disc.
And the owners of the computer can't get the key in the secure enclave? Are they part of the threat model?
“Some person with physical access to the computer” absolutely is part of the threat model.
4 replies →