Skip to content

Tagged: #sep

← Back to all articles
The Secure Enclave: SEPOS, mailbox protocol, what the SEP actually does
A separate ARM core, its own OS, a hardware mailbox. Here's how the main CPU talks to the SEP, what operations cross the boundary, and why kernel exploits don't compromise FileVault.
securitysepapple-siliconsepos
APFS encryption: FileVault, per-file keys, and the SEP's role
How macOS encrypts every byte on disk — per-file keys derived in the SEP, the volume encryption key wrapped by user password, hardware AES in the SSD controller.
apfsencryptionfilevaultsep
macOS security architecture: signing, sandbox, SIP, TCC
Six interlocking layers — code signing, AMFI, entitlements, sandbox profiles, SIP, TCC, and the SEP — that together decide what code is allowed to do on a Mac.
securitycode-signingsiptcc