Apple Made Sudden Security Changes to its Chips in Fall 2020

Apple made unusual mid-production hardware changes to the A12, A13, and S5 processors in its devices in the fall of 2020 to update the Secure Storage Component, according to Apple Support documents.

a13 bionic mockup
According to an Apple Support page, spotted by Twitter user Andrew Pantyukhin, Apple changed the Secure Enclave in a number of products in the fall of 2020:

Note: A12, A13, S4, and S5 products first released in Fall 2020 have a 2nd-generation Secure Storage Component; while earlier products based on these SoCs have 1st-generation Secure Storage Component.

The Secure Enclave is a coprocessor that is used for data protection and authentication with Touch ID and Face ID. The purpose of the Secure Enclave is to handle keys and other information, such as biometrics, that are sensitive enough to not be handled by the Application Processor. This data is stored in a Secure Storage Component inside the Secure Enclave, which is the specific part that Apple changed last year.

The explanation in Apple's support document suggests, at minimum, that the eighth-generation entry-level iPad, Apple Watch SE, and HomePod mini have different Secure Enclaves compared to older devices with the same chip.

However, there are a number of discrepancies in Apple's support document. Despite Apple explaining that A13 products "first released in Fall 2020 have a 2nd-generation Secure Storage Component," there was no device with an A13 chip "first released in Fall 2020." The last device to be released with an A13 chip was the iPhone SE in February 2020.

If the change was, in fact, made to all newly-manufactured devices with these chips, the affected devices would include the iPhone XR, iPhone 11, ‌iPhone SE‌, and fifth-generation iPad mini, as well as the newly-released eighth-generation ‌iPad‌, ‌Apple Watch SE‌, and ‌HomePod mini‌.

a12 a13 s5 secure enclave change
To make matters more confusing, the table listing the multiple versions of the Secure Enclave's storage component in the feature summary omits the S4 chip with a second-generation Secure Storage Component, despite the rubric claiming that such a chip exists. The Apple Watch Series 4 was the only device to contain an S4 chip, and this device was discontinued in September 2019, long before the second-generation Secure Storage Component was implemented in the fall of 2020. It is possible that part of this lack of clarity relates to the fact that the A12 and S4 chips introduced the first-generation Secure Storage Component.

New devices containing the A14 or S6 chip, such as the iPhone 12, ‌iPhone 12‌ Pro, fourth-generation iPad Air, and Apple Watch Series 6, also have the updated Secure Enclave.

Although the change took place in the fall of 2020, the support document detailing the alteration was published in February 2021. The full PDF version of Apple's Platform Security Guide reveals the difference between the first and second-generation Secure Storage Component:

The 2nd-generation Secure Storage Component adds counter lockboxes. Each counter lockbox stores a 128-bit salt, a 128-bit passcode verifier, an 8-bit counter, and an 8-bit maximum attempt value. Access to the counter lockboxes is through an encrypted and authenticated protocol.

Counter lockboxes hold the entropy needed to unlock passcode-protected user data. To access the user data, the paired Secure Enclave must derive the correct passcode entropy value from the user's passcode and the Secure Enclave's UID. The user's passcode can't be learned using unlock attempts sent from a source other than the paired Secure Enclave. If the passcode attempt limit is exceeded (for example, 10 attempts on iPhone), the passcode-protected data is erased completely by the Secure Storage Component.

This appears to be a countermeasure against password-cracking devices, such as GrayKey, which attempt to break into iPhones by guessing the passcode an infinite number of times, using exploits that allow for infinite incorrect password attempts.

The change appears to have been significant enough for Apple to justify an entire "second-generation" version of the Secure Enclave's storage. It is certainly unusual for Apple to change a component in its chips mid-way through production, but Apple likely deemed the security upgrade important enough to roll it out to all relevant new devices from the fall onwards, rather than just devices with the latest A14 and S6 chips.

Top Rated Comments

mtneer Avatar
15 months ago
I wonder if this was in response to a major hardware security breach? Does that mean that devices released before the patch are now vulnerable?
Score: 18 Votes (Like | Disagree)
Serban55 Avatar
15 months ago
Thank you Apple
Score: 14 Votes (Like | Disagree)
mtneer Avatar
15 months ago

everything old become vulnerable.
The article says that the cutoff is "Fall 2020".. that's 6 months ago. We aren't talking about age-old vintage devices here..
Score: 8 Votes (Like | Disagree)
Realityck Avatar
15 months ago
I’m glad Apple is very proactive with hardware based security improvements.
Score: 6 Votes (Like | Disagree)
h3ysw5nkan Avatar
15 months ago

He’s too busy saving $0.05 per iPhone by not including the charger until the guise of “saving the planet!”.
It’s more like $5 per charger, which isn’t insignificant.
Score: 6 Votes (Like | Disagree)
Serban55 Avatar
15 months ago

I wonder if this was in response to a major hardware security breach? Does that mean that devices released before the patch are now vulnerable?
everything old become vulnerable.
Score: 3 Votes (Like | Disagree)

Related Stories

iphone se 3 teardown pbkreviews

Third-Generation iPhone SE Teardown Reveals Larger Battery Capacity and Snapdragon X57 Modem

Monday March 21, 2022 6:38 am PDT by
The first teardowns of the third-generation iPhone SE have surfaced on YouTube, providing a look at components inside the device. iPhone SE 2 on top vs. iPhone SE 3 on bottom via PBKreviews The teardowns reveal the new iPhone SE has a larger 2,018 mAh battery compared to 1,821 mAh for the previous-generation model. The new iPhone SE offers up to an extra two hours of video playback and up to...
iphone se 2020 top

iPhone SE 2 Discontinued, iPhone SE 3 From $429 Now Apple's Cheapest iPhone

Tuesday March 8, 2022 11:48 am PST by
With Apple's debut of the new third-generation iPhone SE at its spring "Peek Performance" event, Apple has dropped the previous second-generation iPhone SE from its lineup on the online Apple Store, which means the cheapest new iPhone Apple offers has gone up in price. The old iPhone SE 2 featured an A13 Bionic chip, 3GB RAM, and a low starting price of $399. It came in white, black, and...
Mac Studio Display Feature Pink

Apple Studio Display Contains 64GB of Storage, But Only 2GB Used

Monday March 21, 2022 3:42 am PDT by
Apple's Studio Display contains 64GB of onboard storage, but only 2GB are actually used by the display, a developer has discovered. As highlighted by developer "Khaos Tian" on Twitter, the Studio Display only uses 2GB of its 64GB of internal NAND storage. Some free space is likely needed for firmware updates, but the 62GB of unused space is seemingly otherwise useless at the current time....
What to Expect Apple 2022

Apple Building Momentum for 2022 Releases as Supply Chain Recovers

Monday January 10, 2022 8:40 am PST by
Apple's supply chain is finally recovering from shortages as it prepares for a slate of new product launches in 2022, DigiTimes reports. In a paywalled report, DigiTimes claims that Apple's supply chain partners are expected to "remain in high gear" through February 2022 as demand for the latest iPhone, iPad, and MacBook Pro models remain strong. Apple faced severe component shortages and...
iPad Air Feature 2

iPad Air 5 Rumored to Feature M1 Chip, 8GB RAM, and 128GB Base Storage

Tuesday March 8, 2022 3:52 am PST by
The fifth-generation iPad Air will feature a range of significantly upgraded internals, according to an unverified but increasingly plausible report coming out of Asia. According to a post from the account "yeux1122" on the Korean blog Naver, the fifth-generation iPad Air will feature the M1 chip. As a result, the iPad Air is also destined to be paired with 8GB of memory, the post claims. ...
apple watch series 3 trio

Kuo: Apple Watch Series 3 May Finally Be Discontinued Upon Its Fifth Anniversary in Q3 2022

Monday March 21, 2022 6:10 am PDT by
Apple may finally discontinue the Apple Watch Series 3 when it reaches five years of age in the third quarter of 2022, according to reputable analyst Ming-Chi Kuo. In a tweet, Kuo said that the Apple Watch Series 3 may reach the end of its life in the third quarter of 2022 because its computing power will not be able to meet the requirements of a new version of watchOS. The Apple Watch...
iphone se 2020 top

Will Apple Keep the Old iPhone SE Around at a Lower Cost?

Monday February 28, 2022 1:30 pm PST by
Apple is rumored to be introducing an upgraded version of the iPhone SE as soon as March 8, the prospective date of the company's first event of 2022. The new iPhone SE is expected to be priced at $399 and it will be replacing the current iPhone SE, but will Apple keep the older model around and drop the price as it sometimes does when new iPhones come out? In his most recent "Power On"...
iPhone SE 2022 Red Feature

Last-Minute Rumor Claims New iPhone SE to Feature MagSafe, Ceramic Shield, and 'Significantly' Better Battery Life

Tuesday March 8, 2022 3:22 am PST by
Ahead of Tuesday's "Peek Performance" Apple event, a last-minute rumor claims that the third-generation iPhone SE expected to be unveiled will feature MagSafe, Ceramic Shield, and "significantly" better battery life. According to a machine-translated post from the account "yeux1122" on the Korean blog Naver, the third-generation iPhone SE will feature Apple's Ceramic Shield technology on the ...

Popular Stories

anker 563 dock ports

Anker's Latest USB-C Docking Station Brings Triple-Display Support to M1 Macs

Wednesday May 18, 2022 7:06 am PDT by
While Apple's early M1-based Macs can only officially support a single external display, there are ways around the limitation. Anker is launching a new 10-in-1 USB-C docking station today which delivers just that. The Anker 563 USB-C dock includes two HDMI ports and a DisplayPort port, and it leverages DisplayLink to carry multiple video signals over a single connection. Given that this hub...
Prosser Series 8 3

Apple Watch Series 8 Rumored to Feature New Design With Flat Display

Wednesday May 18, 2022 6:21 am PDT by
The Apple Watch Series 8 could feature an all-new design with a flat display, according to the leaker known as "ShrimpApplePro." In his latest video on the YouTube channel Front Page Tech, Jon Prosser highlighted information from ShrimpApplePro that suggests the Apple Watch Series 8 could feature a flat display in what seems to be a design originally rumored for the Apple Watch Series 7. ...
apple ar headset concept 1

Apple's Headset Said to Feature 14 Cameras Enabling Lifelike Avatars, Jony Ive Has Remained Involved With Design

Friday May 20, 2022 6:50 am PDT by
Earlier this week, The Information's Wayne Ma outlined struggles that Apple has faced during the development of its long-rumored AR/VR headset. Now, in a follow-up report, he has shared several additional details about the wearable device. Apple headset render created by Ian Zelbo based on The Information reporting For starters, one of the headset's marquee features is said to be lifelike...
apple data auction iphone privacy ad

Apple Highlights iPhone's Latest Privacy Features in New 'Data Auction' Ad

Wednesday May 18, 2022 9:00 am PDT by
Apple today shared a new ad highlighting iPhone privacy features like App Tracking Transparency and Mail Privacy Protection that are designed to give users more transparency and control when it comes to their personal data being collected. The ad revolves around a young woman named Ellie who discovers that her personal data is being sold at an auction house, with bids being placed on her...
apple ar headset concept 2

Apple's AR/VR Headset Nearing Completion as Board Gets Demo

Thursday May 19, 2022 9:52 am PDT by
Apple last week demonstrated its upcoming AR/VR headset to Apple board members, indicating that the device is in an advanced stage of development and could see a debut in the not too distant future, reports Bloomberg. Apple has also ramped up development of the software that runs on the headset, with that software expected to be called "RealityOS," or rOS for short. Render via designer Ian ...