Ivan Krstić

Head of Security Engineering+Architecture (SEAR) at Apple. I don’t speak for my employer.

[Ivan Krstić @radian]

🔺NEW: Apple is expanding Private Cloud Compute (PCC) beyond our data centers. PCC on Google Cloud: NVIDIA Confidential Computing, Intel TDX, and Google's Titan chip, with capabilities that go far beyond a traditional confidential computing deployment. https://t.co/DF2Hw8HUZH

[Ivan Krstić @radian]

@Scott_Radcliffe @rsgnl The blog post has a nice description AND a nice diagram! :-)

[Ivan Krstić @radian]

🔺NEW: Formally verified post-quantum ML-KEM and ML-DSA in corecrypto, with correctness proven from the FIPS spec down to hand-optimized ARM64 assembly — a world first at multi-billion device scale. And we're releasing our Isabelle libraries, ARM64 model, and Cryptol-to-Isabelle translator to advance the state of the art in verified cryptography! https://t.co/LZPHFD0ifE

[Ivan Krstić @radian]

🔺NEW: iPhone and iPad are now the first and only generally-available devices to meet the exacting security requirements for handling classified NATO information. https://t.co/sKOHGeqaoD

[Ivan Krstić @radian]

🔺New security-focused developer event on March 5 at Apple Park: featuring sessions on Memory Integrity Enforcement, new tools in Enhanced Security in Xcode, Apple’s defensive security engineering approach, Swift adoption in security-sensitive code, and how to apply all these techniques to protect apps. Sign up: https://t.co/RBLfFQR6zQ

[Ivan Krstić @radian]

🔺This is the first talk I've given in 6 years – featuring formal verification of post-quantum cryptography, the evolution of the Secure Page Table Monitor, a view into Memory Integrity Enforcement, updates to Apple Security Bounty… and a personal note.

[Hexacon @hexacon_fr]

The collection is complete! 🎬 We just uploaded @radian's keynote to our YouTube channel

https://t.co/kwh8ehTRUg

[Ivan Krstić @radian]

@50valve @0xor0ne @Apple Hi - fully remote is considered on a case by case basis. If that’s the key consideration for you, please don’t let it deter you from applying!

[Natalia Krapiva 👩🏻‍💻🕊 @natynettle]

Great News! 👏

@Apple announced they will be donating 1000 iPhone 17s with the much more secure Memory Integrity Enforcement to high-risk users!

Another meaningful step that Apple is taking to protect journalists, activists & dissidents from commercial spyware! 1/

[Ivan Krstić @radian]

🔺iPhone models announced today include Memory Integrity Enforcement, the culmination of an unprecedented design and engineering effort that we believe represents the most significant upgrade to memory safety in the history of consumer operating systems. https://t.co/ule9gaXzc1

[Ivan Krstić @radian]

🔺New on Apple Security Research blog: a deeply comprehensive Private Cloud Compute security guide, and an unprecedented Virtual Research Environment allowing you to run production PCC software right on your Mac with Apple silicon. And up to a $1M bounty!
https://t.co/a8yyEza8rd

[Ivan Krstić @radian]

@simonw hi, quick question; mind sending me a DM? thank you!

[Ivan Krstić @radian]

🔺New on the Apple Security Research blog: introducing Private Cloud Compute! We believe this is the most advanced security architecture ever deployed for cloud AI compute at scale. https://t.co/bsrpkCdivX

[Jacques Fortier @jacquesgt]

Are you excited to use the power of safe modern programming languages like Swift to make software more secure? My SPEAR team at Apple is hiring a Swift Software Engineer to do exactly that! https://t.co/ZkmCkvmAf8

[Ivan Krstić @radian]

@Goran_Majic Hi Goran – see the section titled "Enable DIT for constant-time cryptographic operations" in https://t.co/Mh2t1jGsKu, and especially: "Apple cryptographic routines ... in the operating system enable DIT internally."

[Ivan Krstić @radian]

🔺Now live: the May 2024 update to the Apple Platform Security Guide! https://t.co/76qglenU7N

[Ivan Krstić @radian]

🔺New on the Apple Security Research blog: introducing PQ3, a groundbreaking post-quantum cryptographic protocol for iMessage. To our knowledge, PQ3 has the strongest security properties of any at-scale messaging protocol in the world. https://t.co/NIyeXjVne6

[POM @hey_pom]

With iOS 17.2 and macOS 14.2 now released, Contact Key Verification 🔐 is available for everybody to enable. Very proud of the work the team has done to ship this groundbreaking feature and advance the state of iMessage security!
https://t.co/8yq9BhJQxc

[Ivan Krstić @radian]

🔺My new op-ed in Lawfare: Personal Data in the Cloud is Under Siege. End-to-end Encryption Is Our Most Powerful Defense. https://t.co/i4DLDNVRCi

[Pietro Borrello @borrello_pietro]

If you are interested in uArch Security, we just opened an internship position at @Apple!

The position is focused on offensive research, and you will be contributing to the security of some of our most advanced CPUs in one of the coolest teams.

Apply at: https://t.co/uG0S53LKoT

[Ivan Krstić @radian]

@aaronp613 Good catch, thanks!

[Ivan Krstić @radian]

🔺New on the Apple Security Research blog: a brief technical overview of iMessage Contact Key Verification! https://t.co/WJjy9mKtTA