Skip to Main Content
PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Apple Removes Encryption From iOS 10 Kernel, Which Could Pay Off Big

Though Apple's move might seem to decrease iOS security at first, it will actually allow many more to try and poke holes in Apple's products—and Apple, in turn, can patch them up faster.

June 23, 2016
iOS 10 Generic

Did Apple just give everyone the keys to the kingdom? Sort-of, but it didn't just drop them on the porch accidentally—it put them on a hook right next to the door.

At least, that's one way to think about Apple's latest decision to move to an unencrypted kernel in iOS 10. And while that might sound like a big security risk to an average person, it isn't. Though the kernel in iOS 10 manages your iPhone's security and dictates what apps can and cannot do on your device, opening it up for anyone to take a look at—like enthusiasts and security researchers—will, paradoxically, increase device security.

And, yes, the move was intentional on Apple's part.

"By unencrypting it we're able to optimize the operating system's performance without compromising security," an Apple spokesperson told the MIT Technology Review.

Apple's decision to remove the various protections previously used to protect the kernel from intrusion will now give security researchers (and white-hat hackers) an easier way to rummage through Apple's code. This certainly means that someone could more easily discover some vulnerability that could allow all sorts of craziness on one's device. The reverse is also true: Apple's unencrypted kernel also means that there will be a lot more eyeballs looking for these kind of vulnerabilities and, ideally, disclosing them to Apple for fixing.

Recommended by Our Editors

Apple is likely hoping that this has the added side benefit of reducing the impact of the iOS exploit market. Presumably, there will be fewer critical vulnerabilities found by individuals, or companies dedicated to the process, that wouldn't also be found by others.

By removing encryption from the iOS 10 kernel, Apple might also gain more legal closure in future battles against entities that want into its devices, like the FBI. Rather than just finding a third-party exploit to do its dirty work, government agencies would have to square off with Apple in the courts if they want Apple to help them break into the company's devices (to use an example from one of Apple's bigger and more recent legal issues).

Like What You're Reading?

Sign up for Fully Mobilized newsletter to get our top mobile tech stories delivered right to your inbox.

This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.


Thanks for signing up!

Your subscription has been confirmed. Keep an eye on your inbox!

Sign up for other newsletters

TRENDING

About David Murphy

Freelancer

David Murphy got his first real taste of technology journalism when he arrived at PC Magazine as an intern in 2005. A three-month gig turned to six months, six months turned to occasional freelance assignments, and he later rejoined his tech-loving, mostly New York-based friends as one of PCMag.com's news contributors. For more tech tidbits from David Murphy, follow him on Facebook or Twitter (@thedavidmurphy).

Read David's full bio

Read the latest from David Murphy