osy
(replying to Saagar Jha)
@saagar if Apple's "TPM" is the Secure Enclave Boot Monitor then your Cellebrite malware cannot corrupt the measurement without bypassing SCIP https://support.apple.com/guide/security/secure-enclave-sec59b0b31ff/web
osy
(replying to osy)
@saagar in TPM parlance, Apple (only) implements a D-RTM, which does hardware enforcement to ensure measured code is what's executed