Hacker News new | ask | show | jobs
by numpad0 1022 days ago
Anyone's free to brute force encrypted data?
1 comments

Do you need to brute force the data, can't you simply intercept the data from the finger print sensor?
Do they go through internal bus unencrypted?
> Do they go through internal bus unencrypted?

Of course not.

"The sensor captures the biometric image and securely transmits it to the Secure Enclave"[1]

IIRC the implementation detail is AES-GCM-256 with ECDH P-256, i.e. the biometric sensor and the secure enclave derive a unique session key via ECDH each and every time.

[1]https://support.apple.com/guide/security/face-id-and-touch-i...