A security researcher claims changes Apple made to tighten its kernel security system in iOS 7 instead weakened the system, making it less secure than its iOS 6 counterpart. (Via CNET and ThreatPost) Azimuth Security researcher Tarjei Mandt discovered the flaw and presented his findings last week at CanSecWest.
The security flaw involves the random number generator Apple uses to secure its kernel. In iOS 6, the number generator that encrypted the kernel derived its values in part from the CPU clock counter. Because it was based on time, the encryption was only marginally secure as the output values were predictable, especially when examining successive numbers.
Apple was aware of the limitations in iOS 6 and attempted to tighten security in iOS 7 by changing the random number generator to a linear congruential generator, which is more susceptible to brute force attacks.
Apple approached Mandt about his findings and asked for his CanSecWest slide presentation.
The security flaw involves the random number generator Apple uses to secure its kernel. In iOS 6, the number generator that encrypted the kernel derived its values in part from the CPU clock counter. Because it was based on time, the encryption was only marginally secure as the output values were predictable, especially when examining successive numbers.
Apple was aware of the limitations in iOS 6 and attempted to tighten security in iOS 7 by changing the random number generator to a linear congruential generator, which is more susceptible to brute force attacks.
The problem with the new generator in iOS 7 is that it uses a linear recursion algorithm, Mandt said, which has "more correlation" between the values it generates. That makes them easier to extrapolate and guess, he said.This flaw potentially allows a malicious hacker to gain kernel-level access to an iOS device via an unpatched vulnerability. The kernel is the base part of the iOS operating system and controls low-level functions such as security and resource allocation.
Apple approached Mandt about his findings and asked for his CanSecWest slide presentation.
44 comments
Apple and Samsung today submitted their witness lists for an upcoming retrial in the long running patent infringement battle between the two companies, reports CNET.
Neither Apple CEO Tim Cook...
Apple today shared two new videos in its "Life's easier on iPhone" series, which are aimed at encouraging Android users to switch over to an iPhone.
The first ad, "App...
A survey conducted by research firm Creative Strategies last month has found that the iPhone X has a 97 percent customer satisfaction rate, primarily among early adopters of the smartphone in the...
The European Commission today announced it has opened an in-depth investigation into Apple's proposed acquisition of Shazam.
The regulators are concerned that the merger could reduce...
Today is National Sovereignty and Children's Day in Turkey, an annual public holiday that takes place on April 23 in the country. As it has in years past, Apple is celebrating the holiday by...
Apple is set to close its last remaining pop-up shop dedicated to Apple Watch next month. Signs displayed at the Tokyo shop, located in Shinjuku's high-end Isetan department store, were shared on...
Today is Earth Day, and around the globe people are celebrating the annual event through demonstrations and gatherings aimed at showing support for the planet and protecting the environment. Apple...
Apple today announced a new worldwide battery replacement program for some 13-inch MacBook Pro models that do not have a Touch Bar. Affected machines were manufactured between October 2016 and...
