Apple SoC security

Apple-designed silicon forms a common architecture across all Apple products and powers iPad, iPhone, Mac, Apple TV, Apple Vision Pro, Apple Watch, and HomePod. For over a decade, Apple’s world-class silicon design team has been building and refining Apple systems on a chip (SoCs). The result is a scalable architecture designed for all devices that leads the industry in security capabilities. This common foundation for security features is only possible from a company that designs its own silicon to work with its software.

Apple silicon has been designed and fabricated to specifically enable the system security features detailed below.

Feature	A10	A11, S3	A12-A14 S4-S10	A15-A18	M1	M2-M4	A19 M5
Kernel Integrity Protection
Fast Permission Restrictions
System Coprocessor Integrity Protection
Pointer Authentication Codes
Page Protection Layer				1	2
Secure Page Table Monitor						2	2
Memory Integrity Enforcement with Enhanced Memory Tagging Extension

1: Secure Page Table Monitor (SPTM) is supported in the A15 or later and M2 or later SOCs and replaces Page Protection Layer on supported platforms.

2: Page Protection Layer (PPL) and Secure Page Table Monitor (SPTM) enforce the execution of signed and trusted code on all platforms with the exception of macOS (because macOS is designed to run any code). All of the other security properties, including the protection of page tables, are present across all supported platforms.

Apple-designed silicon also specifically enables the Data Protection capabilities detailed below.

Feature	A10, A11 S3	A12 or later S4 or later M1 or later
Sealed Key Protection (SKP)
recoveryOS - All Data Protection Classes protected
Alternate boots of DFU, Diagnostics, and Update - Class A, B, and C data protected

Download this guide as a PDF

Nuttig?

Apple Platform Security

Apple SoC security