Apple's open letter - they can't or won't backdoor iOS?

Question

Apple released an open letter to the public outlining their reasons for not complying with the FBI's demands to modify the iPhone's security mechanism.

Here's a summary:

• The FBI has an iPhone in their possession which they would like to access data from. The phone is locked and fully encrypted.
• After failing to get into the phone, the FBI asked Apple to unlock the phone.
• Apple said since the phone is encrypted, they can't get into it either.
• The FBI asked Apple to modify the iPhone OS to enable brute force password attempts electronically. (Currently the passwords can only be entered in via the manual interface, and is limited to 10 attempts.)
• Apple refused. They believe it would be too dangerous to make that change because in the wrong hands it would undermine the security of all iPhone users, even if they only used the software in this instance.

I understand Apple's position of not wanting to make the change, particularly for new phones, but it's unclear whether the change could actually be made and installed on an existing locked and encrypted phone. Could they actually accomplish this for an existing encrypted phone? If yes, then isn't simply knowing this is possible also undermining the security? It seems to me it would be just one step removed from the backdoor they are trying to keep closed.

Update: since this is a security forum, I feel it is important to point out that Apple is using the word backdoor differently than we typically do on this site. What the FBI has asked Apple to do would not result in a backdoor by the typical definition that we use, which is something akin to a master key. Instead, in this case, if Apple were to comply, the FBI would then be able to attempt to brute force the passcode on the phone. The strength of the passcode would determine whether they are successful in gaining access. Based on Dan Guido's article (linked to in Matthew's answer), if each passcode try takes 80ms, then the time needed to brute force the passcode would take, on average (by my calculations):

• 4 digit numerical passcode: about 7 minutes
• 6 digit numerical passcode: about 11 hours
• 6 character case-sensitive alphanumerical passcode: 72 years
• 10 character case-sensitive alphanumerical passcode: 1 billion years

Obviously if a 4 or 6 digit numerical passcode was used, then the brute force method is basically guaranteed to succeed, which would be similar to a backdoor. But if a hard passcode is used, then the method should probably be called something other than a backdoor since gaining access is not guaranteed, or even likely.

Update 2: Some experts have suggested that it is theoretically possible for the FBI to use special tools to extract the device ID from the phone. Having that plus some determination and it should be possible to brute force the pin of the phone offline without Apple's assistance. Whether this is practically possible without destroying the phone remains to be seen, but it is interesting to note that if it can be done, the numbers I mentioned in the above update become meaningless since offline tools could test passcodes much faster than 80ms per try. I do believe that simply knowing this is possible, or even knowing that Apple can install new firmware to brute force the passcode more quickly, does imply a slightly lessened sense of security for all users. I believe this to be true whether Apple chooses to comply with the order or not.

There are multiple excellent answers here, and it's very difficult to choose which one is best, but alas, there can be only one.

Update 3: It appears that the passcode to unlock the phone was in fact simply a 4 digit code. I find this interesting because this means the FBI asked Apple to do more than was necessary. They could have simply asked Apple to disable the wipe feature and timing delay after an incorrect attempt. With only those 2 changes one could manually attempt all 10,000 possible 4 digit codes in under 14 hours (at 5 seconds per attempt). The fact that the FBI also demanded that Apple allow them to brute force electronically seems odd to me, when they knew they didn't need it.

Update 4: It turns out the FBI was able to unlock the phone without Apple's help, and because of this they dropped their case against Apple. IMO, overall this is bad news for Apple because it means that their security (at least on that type of phone) was not as strong as previously thought. Now the FBI has offered to help local law enforcement unlock other iPhones too.

Answer 1

Various commentators suggest that this would be possible, on the specific hardware involved in this case. For example, Dan Guido from Trail of Bits mentions that with the correct firmware signatures, it would be possible to overwrite the firmware, even without the passcode. From there, it would be possible to attempt brute force attacks against the passcode to decrypt the data.

It appears to not be possible if the firmware replacement is incorrectly signed, and the signing keys have been kept secure by Apple so far.

He also mentions that this wouldn't be possible on some later devices, where the passcode check is implemented in a separate hardware module, which enforces time delays between attempts.

Edit Feb 2017: Cellebrite (a data forensics company) have announced the capability to unlock and extract data from most iPhones from the 4S to the 6+, strongly suggesting that a flaw exists somewhere, which they are able to exploit. They haven't released full details of this.

Answer 2

After doing some research, I now believe this is possible, but that it isn't very easy. Without getting too technical, if you look closely, Apple repeatedly implies that they can do it:

The United States government has demanded that Apple take an unprecedented step which threatens the security of our customers.

But now the U.S. government has asked us for something we simply do not have, and something we consider too dangerous to create.

Specifically, the FBI wants us to make a new version of the iPhone operating system, circumventing several important security features, and install it on an iPhone recovered during the investigation. In the wrong hands, this software — which does not exist today — would have the potential to unlock any iPhone in someone’s physical possession.

Building a version of iOS that bypasses security in this way would undeniably create a backdoor.

While we believe the FBI’s intentions are good, it would be wrong for the government to force us to build a backdoor into our products. And ultimately, we fear that this demand would undermine the very freedoms and liberty our government is meant to protect.

If they couldn't do it, it could be a moot point to respond to this in such a way. I would say that it's possible for them to implement such a feature, if they want.

Answer 3

Could they actually accomplish this for an existing encrypted phone?

Yes. They could provide a compiled image of os with anti-bruteforce features disabled. The fact they're making an open letter IMHO means they've already exhausted all excuses to not do so, implying they are fully capable of doing it.

They would have to be able to auto update a phone that they don't have access to.

No. They would provide binaries to the FBI. The FBI has physical access to the phone and can flash it. They can't prepare such image themselves because iPhone checks signature for Apple private key. Actually this key would enable FBI to do everything themselves (well, at quite a cost of reverse-engineering), but they're not insolent enough to ask for it.

If they can actually do that, then isn't simply knowing this is possible also undermining the security? It seems to me it would be just one step removed from the backdoor they are trying to keep closed.

It is. Holder of such binaries could then take any iPhone 5C, flash it with this version, and bruteforce it easily. (Or to be exact, any model that can run 5C firmware correctly). This is not a future backdoor, it's a master key to every iPhone 5C you can physically get your hands on.

Answer 4

Only Apple knows, but I'm going to guess they won't do it. I suspect the FBI has a pretty good idea what is and what isn't possible, especially since Apple has otherwise been cooperating with them. Also the people who work for the FBI aren't idiots, and I bet this isn't the first crime they've investigated with an iPhone.

Furthermore, Apple's argument against breaking this particular phone seems to be that they think such an action would compromise all phones. Despite the popularity of this belief, which is grounded on suspicion more than fact, The actual FBI order asks for a firmware which:

• is limited to just the device in question
• does not need to leave Apple's facility

Specifically, the FBI does not ask for:

• an exploit that could be applied to any phone
• access to the exploitable firmware
• unsupervised access to the exploited phone
• access to Apple's code signing key

IANAL, but I bet such things are unlawful. Even if you want to believe the FBI is a malicious organization, they won't ask for such things in a court order.

Here's the relevant section of the order, with interesting parts highlighted:

Apple's reasonable technical assistance shall accomplish the following three important functions: (1) it will bypass or disable the auto-erase function whether or not it has been enabled; (2) it will enable the FBI to submit passcodes to the SUBJECT DEVICE for testing electronically via the physical device port, Bluetooth, Wi-Fi, or other protocol available on the SUBJECT DEVICE and (3) it will ensure that when the FBI submits passcodes to the SUBJECT DEVICE, software running on the device will not purposefully introduce any additional delay between passcode attempts beyond what is incurred by Apple hardware.

Apple's reasonable technical assistance may include, but is not limited to: providing the FBI with a signed iPhone Software file, recovery bundle, or other Software Image File ("SIF") that can be loaded onto the SUBJECT DEVICE. The SIF will load and run from Random Access Memory and will not modify the iOS on the actual phone, the user data partition or system partition on the device's flash memory. The SIF will be coded by Apple with a unique identifier of the phone so that the SIF would only load and execute on the SUBJECT DEVICE. The SIF will be loaded via Device Firmware Upgrade ("DFU") mode, recovery mode, or other applicable mode available to the FBI. Once active on the SUBJECT DEVICE, the SIF will accomplish the three functions specified in paragraph 2. The SIF will be loaded on the SUBJECT DEVICE at either a government facility, or alternatively, at an Apple facility; if the latter, Apple shall provide the government with remote access to the SUBJECT DEVICE through a computer allowing the government to conduct passcode recovery analysis.

So apparently, the FBI believes Apple could write this compromised firmware such that it would work only on the specific phone the FBI needs to access. Since firmware must be signed by Apple to work, it should not be possible for the FBI or anyone else to modify this compromised firmware to work on another phone. If that were the case, the FBI could just modify the current firmware, without Apple's help. So this would seem to address the concern that any phone could be compromised.

The FBI is also willing to give Apple the phone so the firmware never even needs to be in the FBI's possession. That would seem to address the concern that the firmware would "fall into the wrong hands". Even if it did, it wouldn't be exploitable given the previous provision.

Given these provisions in the FBI's order that seem to specifically address the concerns in Apple's letter, we can only guess what Apple's reason for refusing the order may be.

It's possible there's some technical detail that Apple isn't telling us, and of which the FBI isn't aware. Or perhaps the FBI decided to ask for something they already knew to be impossible.

It's also possible that Apple thinks this is good PR. Apple certainly has a financial interest in making the iPhone appear "unhackable even by the FBI". Apple may also be trying to leverage anti-government sentiment.

One could argue there is an ethical reason for not circumventing security measures on a phone, and that privacy is more important than all other concerns, even if that phone has been lawfully seized by by a federal bureau charged with invading people's privacy to investigate crime, and that phone belonged to now dead terrorists, and the phone could contain intelligence that could prevent further terrorist attacks. I'll be waiting for Schlage to release a similar public letter the next time a law enforcement agency wants to enter someone's home.

One could also argue that relying on what is probably a 4-digit numeric key to encrypt data is hardly secure, and whether Apple helps or not, the FBI will get in that phone. They may just need to perform some more difficult physical attacks. Breaking a pathologically weak key by brute force is hardly a backdoor. It's the front door.

Maybe the courts will sort it out, maybe not. Probably we'll never know.

Answer 5

Question Restatement:

1. Could [Apple] actually accomplish this for an existing encrypted phone?

2. If yes, then isn't simply knowing this is possible also undermining the security? It seems to me it would be just one step removed from the backdoor they are trying to keep closed.

Quick Answer:

Yes, Apple can easily modify their minimal version of their iOS, (without the GUI) -- to have a brute force interface, (or anyone else if Apple uses their signing key on the firmware as the court order demands).

And Absolutely -- What the FBI is requesting isn't a "backdoor", but an interface to exploit the backdoor / vulnerability -- that is already there.

Any refusal on Apple's part doesn't remove the vulnerability, here's why:

Definitions:

Passcode and AES 256 Key: To be very clear -- the question, (and this answer) -- is whether a hacking interface can be made for the FBI -- to brute force the user's passcode -- not the underlying AES 256 Key -- which is protected by that user's passcode. The AES key in turn, is used to access the encrypted data.

The All Writs Act of 1789: requires 4 conditions be met -- the first which evidently is not met:

The absence of alternative remedies — the All Writs Act is only applicable when other judicial tools are not available.

This law ONLY can be invoked if the Burden of Proof is met -- IF AND ONLY IF there are absolutely NO other judicial tools available :

... This law does not allow the FBI to complain that the available methods it already has -- are inefficient compared to another that they don't currently have legal access to.

Three of Many Possible Methods -- Attack Trees:

The Question is whether the first attack is possible, despite the possibility of other remedies available to the FBI, (like the second):

1. Hacking Apple, Highly Probable to Succeed: This Court Order mandates that Apple must allow the FBI to hack Apple's own Firmware, rather than the FBI hacking the User's encrypted data directly -- to exploit an existing iPhone vulnerability, and also exploiting Apple as a U.S. legal entity.

2. Hacking the User's Data, Viable -- Incredibly Time Consuming: Alternatively, the Court order could have simply directed Apple, (or SanDisk), to Clone the User's Data for the FBI to copy, (YouTube Video of iPhone 6 SanDisk SSD.) -- and hack from a separate System avoiding the iOS data wipe feature, (AES Hacking Links).

3. TPM / ROM Exploits: Methods that bypass the O.S. and even AES altogether are possible -- such as this incredible TPM Man in the Middle Attack :

   The Trusted Computing Group, which sets standards on TPM chips, called the attack "exceedingly difficult to replicate in a real-world environment." It added that the group has "never claimed that a physical attack - given enough time, specialised equipment, know-how and money - was impossible. No form of security can ever be held to that standard."

... And the FBI certainly has those resources, (along with the NSA).

Answer 1 - Apple's Compliance Wouldn't Decrease Security - but Exposes an Already Present Vulnerability:

Apple's response: acknowledges that there are already security vulnerabilities in their device -- (1.) themselves as an exploitable legal entity, and (2.) their hardware design.

Apple's response is Misleading -- simply a marketing opportunity to offset public awareness of this security vulnerability already present in their design, (and also Microsoft's Bitlocker--if configured to use the TPM).

Apple's compliance wouldn't reduce the security of their system -- it would only be exploiting a vulnerability that is already there, (which isn't present in solutions that don't use TPM-like solutions, (like Bitlocker without the TPM, Luks, the old TrueCrypt, Veracrypt, etc).

The strength of the device's encryption isn't in its hardware -- and shouldn't be -- but in the AES encryption algorithm itself.

Security vulnerabilities increase proportionately as more complexity is added upon the underlying AES cryptographic system, (more points of attack).

Since Apple is storing a secondary passkey in their ROM, (Salt, etc.) -- they have created a security vulnerability far greater than relying on AES -- themselves.

This vulnerability was intentionally added to the iOS, and similar TPM solutions -- for convenience -- to allow end-users to enter simple pass-phrases.

Answer 2 - But, the FBI has Alternative Methods:

The FBI's response: clearly indicates that they are already aware of alternate remedies, but hoping to shift their burden of due process upon private citizen's and corporations -- whether or not that is ethical or constitutional.

The FBI's complaint isn't the use of AES 256, or even to have access to the underlying data -- but they complain of the lack of an interface that would allow them to exploit an already existent vulnerability in the iPhone -- a brute force attacks against the user's passcode.

The FBI is in essence trying to hack Apple -- either as a legal business entity, (legal/social engineering) -- or by creating a Brute Force interface to exploit the iOS' security vulnerability.

Asking for an interface to hack the user's passcode reduces the level of complexity by --many, many--orders of magnitude.

The obvious alternate remedy is AES brute force attack against the encrypted storage -- using tools which already exist, (AES Hacking Links, and other potential attack also exist, Stack Exchange Link).

This shows that the FBI's request is simply vexatious -- political, because they are already aware of alternate remedies to hack/access the data -- and they know it.

The FBI is simply looking for a means that shifts their burden of due process, and the complexity, to private citizens and corporations.

If the request was in good faith -- then the order would have been limited to Section 6 of the Court Order, (maintaining the integrity of the data) -- which would allow the FBI to use alternate remedies -- without fear of losing the data.

Summary:

The use of TPM type hardware devices introduces cryptographic vulnerabilities upon AES that normally are not present when user's provide strong keys for AES directly.

Bitlocker, (without a TPM), Luks and similar systems rely on user's to manually enter a strong AES key. Those designs don't limit the user to simple pass-phrases -- which could then be used in turn to access the underlying encryption key.

The question of law is -- whether or not a Judge will rule that hacking AES is a viable "alternative remedy" under the Act, or any of the other potential remedies;

If the Court rules that the AES attack, (or any of the others), are not viable alternate remedies, then the order will probably stand.

And then, Apple will simply re-engineer their devices to ensure this won't happen again -- which they should do anyway.

Answer 6

Apple wouldn't have to install the "cracked" version of iOS on all iPhones, so it wouldn't harm the security of all devices, although that is what the media reports seem to be implying.

The other option would be for Apple to extract the encrypted contents of the flash memory and then brute-force the decryption algorithm in an emulated environment.