Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

2
  • Thanks. Does that mean that there aren't ways for iOS app developers to generate/store keys/certs within the secure enclave like it's possible on Android? Commented Aug 22, 2016 at 8:09
  • Correct it is not possible. Each Secure Enclave is provisioned during fabrication with its own UID (Unique ID) that is not accessible to other parts of the system and is not known to Apple. When the device starts up, an ephemeral key is created, entangled with its UID, and used to encrypt the Secure Enclave’s portion of the device’s memory space. -Source: apple.com/business/docs/iOS_Security_Guide.pdf Commented Aug 22, 2016 at 13:09