跳转到主内容

苹果 iPhone 5s 于2013年9月10日公布。该设备的维修与以前的型号相似,需要螺丝刀和撬棒。可使用GSM或CDMA / 16、32或64 GB。颜色有银色、金色和太空灰。

3530 个问题 查看全部

Can we erase secure enclave to re-pair touch id?

Okay. I am sick of this whole "touch id is paired to the logic board and blah blah blah only the magical demigods at apple can replace it..."

This is ridiculous.

I'm asking: You know how the a7 chip only accepts a touch id module that has one (secret) serial number? Well, First of all, which part of the a7 chip has this serial number and does the checking to see if your home button matches it, and second, could we find a way to not try to read this secret key from this part of the chip (apple probably has security guards against this, so this probably wont work), but actually WIPE this area of the chip completely clean? It may be impossible to read from it, but it shouldn't be impossible to wipe it.

Then of course, we have the issue of trying to code another "expected" serial number back in, but we'll cross that bridge when we come to it.

已回答! 显示答案 我也有这个问题

这是一个好问题吗?

得分 0
6条评论

I'm sorry I have another question, but I do. could I get a qualcomm 820 chip and have a professional BGA solder it onto the board? I'm sorry if this question is stupid, but I'm 14 and don't have a degree in this stuff.

Then I could program a key myself, and since they're both armv8, it might work right?

wrong?

ridiculous question?

完成的

No. iPhone SoC pin layout is custom designed, not standard ones, so you can't swap if for other models. It's not like a PC CPU that uses standard sockets and singling protocols. Also iOS will not boot on non-Apple CPUs.

完成的

Wow. thank you so much. Can you read from the touch id efuses without decapping? sorry, alternate ifixit id

完成的

why do you need 2 IDs?

完成的

No, nobody has figured out how, that's why it's called a "secure" system.

完成的

显示更多的1条评论

添加一条评论

2个答案

已选择的解决方案

People are smarter than you, what you can think of, people have already been trying a long time. Wishful thinking gets you nowhere.

Back to the topic. It would be reasonable to believe the keys in secure enclave are implemented using e-fuses, which are physically one-time programmable. Once you program the key and set the lock bit, the bootrom reads the lock bit and enters secure boot mode, disables all external debug/test interfaces to protect the secrecy and integrity of keys. You cannot access the secure module because all unauthenticated operations are simply rejected.

It may be possible to hack into the button sensors and find a way to program blank buttons straight out of factory, which I believe is Apple's method to repair Touch ID. They have the software to sign secure commands to enable secure enclave to invoke factory pairing again, which reads the key from the e-fuses and write to blank Touch ID buttons.

这个答案有帮助吗?

得分 6

17条评论:

Tom Chai, please don't say "people are smarter than you". Whether it is true or not, it hurts my feelings.

完成的

It hurts your feelings? What?

If I am ever the smartest person in the room, I am in the wrong room.

完成的

The thing that has been, it is that which shall be; and that which is done is that which shall be done: and there is no new thing under the sun. Ecclesiastes 1:9

完成的

@mayer did you get this figured out yet? I would like an answer by 5PM Eastern.

完成的

Trump will fix this Touch ID issue, MAGA

完成的

显示更多的12条评论

添加一条评论

OK go ahead and do it.

这个答案有帮助吗?

得分 5

2条评论:

this aint helpful.

完成的

Sure it is.

We get people like you all the time. They come on here and tell those of us with skills what we should do. Well most of us want no part of issues with ethical or legal questions. its just not worth it. Plus...what is the reward? Getting more $30 home button jobs? That's not worth the possible legal problems.

Log off the computer. Go learn how to do these things. Burn your fingers. Fry some boards. Find out just how hard it can be to do what it is you are asking others to do. Then come back and tell us what to do.

I'll be here waiting.

完成的

添加一条评论

添加你的答案

Earl Fechter 将永远感激不已
浏览统计数据:

过去 24 小时: 0

过去 7 天: 0

过去 30 天: 3

总计 2,527