←back to thread

Private Cloud Compute Security Guide

(security.apple.com)
398 points djoldman | 1 comments | 06 Nov 24 13:48 UTC | HN request time: 0.205s | source
Show context
jagrsw ◴[06 Nov 24 14:25 UTC] No.42062732[source]▶
If Apple controls the root of trust, like the private keys in the CPU or security processor used to check the enclave (similar to how Intel and AMD do it with SEV-SNP and TDX), then technically, it's a "trust us" situation, since they likely use their own ARM silicon for that?

Harder to attack, sure, but no outside validation. Apple's not saying "we can't access your data," just "we're making it way harder for bad guys (and rogue employees) to get at it."

replies(6): >>42062974 #>>42063040 #>>42063051 #>>42064261 #>>42065655 #>>42078881 #
1. abalone ◴[07 Nov 24 17:35 UTC] No.42078881[source]▶
> Harder to attack, sure, but no outside validation.

There is actually a third party auditor involved in certifying hardware integrity prior to deployment.[1]

But yes, the goal is to protect against rogue agents and hackers (and software bugs!), not to prove that Apple as an organization has fundamentally designed backdoors into the secure element of their silicon.

[1] https://security.apple.com/documentation/private-cloud-compu...