Secure Coding mailing list archives

Apple Places Encrypted Binaries in Mac OS X


From: leichter_jerrold at emc.com (Leichter, Jerry)
Date: Fri, 3 Nov 2006 19:28:15 -0500 (EST)

BTW, an interesting fact has been pointed out by Amit Singh, author
of a book describing Mac OS X internals:  The first generation of
x86-based Mac's - or at least some of them - contained a TPM chip
(specifically, the Infineon SKB 9635 TT 1.2.  However, Apple
never used the chip - in fact, they didn't even provide a driver
for it.  It certainly was not used in generating the encrypted
binaries.  Proof?  The most recent revision of the Macbook Pro
does *not* contain a TPM chip.

So in fact Apple is not using the TPM to "certify" a machine as
being real Apple hardware.  Presumably one can hack out the
decryption key - it's in the software somewhere....

                                                        -- Jerry



Current thread: