Apple will store some iCloud encryption keys in China, raising security concerns

Apple will store some iCloud encryption keys in China, raising security concerns

6 years ago
Anonymous $gcegwZ91io

https://www.theverge.com/2018/2/26/17052802/apple-icloud-encryption-keys-storage-china

Last month, Apple announced that it would hand over management of its Chinese iCloud data to a local, state-owned firm in China called Cloud Big Data Industrial Development Co (GCBD) at the end of February in order to comply with new laws. Now, Reuters is reporting that Apple will also hold iCloud encryption keys for Chinese users in China itself, raising new concerns about government access. The new policy does not affect any iCloud users outside of China.

As Reuters notes, that compliance means Chinese authorities will have easier access to user data that’s stored in Apple’s iCloud service, especially now that, for the first time, Apple will store the keys for Chinese iClouds within China. Apple says it alone would control the encryption keys, and Chinese authorities do not have any “backdoor” to access data. Until now, such keys were exclusively stored in the US for all users.