GrayKey: Encryption protects. The internet would be a very dangerous place without encryption, as would Wi-Fi hotspots, or any device that uses password protection like the iPhone.
However, the iPhone no longer protects you like it once did. In America, authorities are using a cheap tool to bypass iPhone encryption.
Below we will take a look at the new GrayKey tool, what it does, why it is dangerous, and why is Apple worried?
Apple vs. FBI
Before we talk about GrayKey, let's take a look at how the iPhone encryption controversy began.
Those involved in technology (and not only) will remember the San Bernardino iPhone. After a terrorist attack in San Bernardino, the FBI asked Apple to create a backdoor in the encryption that would let them bypass the security of the iPhone of one of the deceased terrorists. Apple refused, stating that in case of creating a backdoor, anyone could have access to its devices.
Finally, an Israeli security company, Cellebrite, found a way to bypass Apple's security mechanisms using an unknown vulnerability. At the time, Cellebrite's service cost $ 5,000 per device and the phone had to be sent to the company's facilities.
In 2017, a company called Grayshift appeared on the market. It has a new revolutionary product called GrayKey. The purpose of GrayKey was unclear until Thomas Fox-Brewster revealed its functionality to Forbes, presenting several photos that showed in detail what exactly GrayKey's iPhone Unlocker does.
GrayKey's iPhone Unlocker
The GrayKey device is a small, gray box. It comes with two Lightning cables.
The iPhone connects to the GrayKey device for about two minutes, but the actual processing time varies depending on the strength of the passcode.
It takes the device about two hours to brute-force an easy passcode, while more difficult passes (six digits) can take three days or more.
When the iPhone passcode is detected, the phone will display a black screen showing the code along with other device information.
GrayKey downloads the entire iPhone
The program displays the device's passcode, but it downloads the entire iPhone file system to GrayKey's device. GrayKey then connects to a Web service that performs the analysis.
Forbes Image
This means the device can crack any iPhone, even the latest iPhone X. When the process is complete, it displays the following messages: “Password Found,” “Software Version,” “iTunes Backup,” and “Full Filesystem.” All of the above are available for download along with the SHA256 hash.
GrayKey costs…
GrayKey's iPhone Unlocker comes in two different versions. One version costs $15,000 and requires an internet connection to work, while the second costs $30,000 and works offline, with no limit on the number of times the GrayKey device can be used.
The device will likely work until Apple discovers the vulnerability and fixes it.
What is Apple doing to stop GrayKey?
As you can imagine, Apple is not too happy with the situation. The company is currently testing the public beta of iOS 12. The new operating system has a new feature that drastically restricts access to the Lightning port on a locked iPhone.
iOS 12 may make brute-force attacks through the Lightning port useless by disabling access from this route. The new USB Restricted mode will stop any data communication, which will make GrayKey useless.
The situation described above may not last long, unless Grayshift continues to find vulnerabilities in Apple's operating system. So we are talking once again about the cat and mouse game, which is also welcomed by Law Enforcement Authorities, since they can finally access Apple devices.
Of course, Apple will have to consider a bunch of questions that arise when a device is broken. Will the “broken” iPhone be permanently vulnerable? Can the iPhone owner use their phone normally again or will they have to replace it?
___________________________________
- Brave browser now features private browsing via Tor
- Is iPhone X worth buying? Why some said no
- Apple or Google? Apple or Samsung? Read before you answer
