The iCloud Keychain and IOS 7 Data Protection
Authors: Andrey Belenko

Date: December 2013
Publication: 5th International Conference on Passwords (Passwords13 Bergen)
Source 1:

Abstract or Summary:
When Apple announced iOS 7, iCloud Keychain was one of its key features. It is no doubt great for usability, but what about security? What kind of access does Apple have to the passwords stored in the iCloud? This talk will address this and other questions.

The talk is focused on protection of user data. We will review iOS Data Protection and changes that iOS 7 brought to it. We will see what is new and where is Apple going with this. We will explore in great detail the inner workings of the new iCloud service 'escrowproxy' which is the essence of the iCloud Keychain. Other iCloud services, such as iCloud Backup, will receive some attention, too.

Main giveaway of the talk is the in-depth analysis of the new iCloud Keychain feature. You will learn how, when, and where things are encrypted, and what it takes to decrypt them. Note: Video of presentation:

Do you have additional information to contribute regarding this research paper? If so, please email with the details.

<-- Back to Authentication Research Paper Index

[Home] [About Us] [News] [Research]

Copyright © 2019