242 reputation
18
bio website
location
age
visits member for 2 years, 4 months
seen yesterday

Nov
27
comment Secure Boot on Microsoft Surface Pro 3 (or modern PCs)?
This question is related to your final question.
Nov
17
comment Accessing iPhone data without passcode - how difficult?
Can you give an example of how insecure boot could result in accessing user data without a passcode on modern iOS? Ostensibly, decrypting user data requires the passcode regardless of malicious boot code.
Nov
16
revised Accessing iPhone data without passcode - how difficult?
added 22 characters in body
Nov
16
awarded  Teacher
Nov
14
comment Accessing iPhone data without passcode - how difficult?
Interesting. It looks like a high-entropy key is derived algorithmically from, in part, the passcode. However, this is done in a separate chip containing and using a unique ID. This arrangement complicates performing an offline brute-force attack and limits the online attempt rate. See my answer for more details.
Nov
14
answered Accessing iPhone data without passcode - how difficult?
Nov
14
comment Accessing iPhone data without passcode - how difficult?
The second bullet surmises that the key can be algorithmically derived from the passcode. It seems plausible that instead, while the device is locked, a high-entropy key is stored only in a "trusted" area of hardware (a la bitlocker PIN+TPM), and that key is unlocked with the passcode. The premise in that case is that the key is much more difficult to exfiltrate from the "trusted" area of hardware than brute-forcing the 4-digit password after dumping the plain-old flash.
Mar
11
revised Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?
fixed title
Mar
11
comment Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?
Also, do you have a source supporting the general availability of RdRand to Hyper-V guests? Ostensibly, not all VMWare guests have access to RdRand. It seems like the same might be true for Hyper-V.
Mar
11
comment Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?
Do you have a source for your point (4)? The link you provided does not support it.
Mar
10
awarded  Nice Question
Feb
22
awarded  Yearling
Feb
14
asked Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?
Apr
10
awarded  Excavator
Apr
10
revised How does a client authenticate the domain controller
fixed malformed numbered list; spelling/grammar fixes
Apr
10
suggested approved edit on How does a client authenticate the domain controller
Mar
27
accepted When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?
Mar
17
accepted Is there a reliable way to simulate “Evil Maid Attack” boot path tampering when using bitlocker?
Mar
17
answered Is there a reliable way to simulate “Evil Maid Attack” boot path tampering when using bitlocker?
Mar
17
comment When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?
Thanks for the great answer. I'm not grokking your last paragraph, though. What do you mean by "internal encryption"?