And even then it's hard to tell what some codenames mean. I wonder if Apple redacts in-code documentation before publishing it or if they don't have any to begin with 🤔
But I managed to figure out *some* stuff. So instead of "what the heck are SOS and CKKS and Engram and Manatee", now I know "SOS (SecureObjectSync) is the old sync system, CKKS (CloudKit Keychain Sync) is the new one, Engram and Manatee are some CKKS-only keychain sync views"
I still don't know how SOS or CKKS work, or what a "keychain view" really means, or what's stored in Engram vs Manatee, but it's *something*, and writing it down can help others start from a non-blank state if they want to research this more:
Heh, searching "apple ckks" on DuckDuckGo, the first result is someone being paranoid about com.apple.security.ckks entries in the keychain viewer on macOS, the second is the wiki page braindump I wrote today.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
I'm now adding these keys to the wiki. It took some tweaking to make the scripts handle the new files in iPhone 11's ipsws, but now it's ready and I can automate it 😎 theiphonewiki.com/wiki/Firmware_…
The wiki is a terrible place for these. It's absurd to format this stuff into wiki markup, and then have other scripts that parse that (or the HTML) back into a usable form to eg. get keys for decryption.
Ideally there should be some DB-backed website+API. But that doesn't exist, so as long as people are using the wiki, might as well put this new data there 🤷♂️