Data is unrecoverable on macbooks with secure boot if T2 firmware gets corrupted (opens in new tab)

(vimeo.com)

8 points0x402DF8545y ago3 comments

3 comments

I mean yes, the firmware guards the encryption keys, if the firmware is corrupt then access to the key is corrupt.

If the key could be recovered with a corrupt firmware, then the SEP would be open to an attack to extract the keys by forcing firmware corruption and then using that as a path to compromising the device.

rasz5y ago

I mean I own the hardware. I should be able to backup the key.

olliej5y ago

you back up the data - the security model for an HSM (e.g. the T2) is that secrets cannot be extracted. Once the key can be extracted it then that security model is broken.

j / k navigate · click thread line to collapse

3 comments

olliej5y ago

I mean yes, the firmware guards the encryption keys, if the firmware is corrupt then access to the key is corrupt.

rasz5y ago

I mean I own the hardware. I should be able to backup the key.

olliej5y ago

you back up the data - the security model for an HSM (e.g. the T2) is that secrets cannot be extracted. Once the key can be extracted it then that security model is broken.

j / k navigate · click thread line to collapse