Hacker News new | ask | show | jobs
by croes 1023 days ago
Do you need to brute force the data, can't you simply intercept the data from the finger print sensor?
1 comments

Do they go through internal bus unencrypted?
> Do they go through internal bus unencrypted?

Of course not.

"The sensor captures the biometric image and securely transmits it to the Secure Enclave"[1]

IIRC the implementation detail is AES-GCM-256 with ECDH P-256, i.e. the biometric sensor and the secure enclave derive a unique session key via ECDH each and every time.

[1]https://support.apple.com/guide/security/face-id-and-touch-i...