logoalt Hacker News

rytis • today at 10:05 AM • 1 reply • view on HN

what does that even mean? why would encryption depend on how storage is attached (soldered or plugged in)?


Replies

swiftcoder • today at 12:58 PM

It's unrelated to the physical connection, but the drive encryption used on the built-in drive keeps its keys in the CPU's secure enclave, so dead CPU == data lost, regardless of whether the ssd itself is damaged.

Obviously if you used the same encryption scheme on a removable drive you'd hit the same issue - but most people don't do that, because storing the encryption keys in the Secure Enclave makes your drive effectively no longer removable.