Skip to main content
  1. Home
  2. Phones
  3. Apple
  4. Mobile
  5. News

iOS 10 kernel is not encrypted, and here's Apple reasoning

By
Add as a preferred source on Google

Apple’s developer preview for iOS 10 has been available for more than a week, but there’s one big change that people are only noticing now — the kernel code is not encrypted.

The kernel is the core of the operating system — it controls software requests and helps process them to instruct the device’s hardware. The kernel has always been encrypted in previous iOS versions, but with iOS 10’s developer preview it wasn’t, sparking surprise from technology researchers and security experts, according to MIT’s Technology Review.

Recommended Videos

It’s an unexpected move because it’s now much easier to search for security vulnerabilities, and it was unclear whether it was deliberate or an accident. The Cupertino company has now confirmed that it was done on purpose, and its reasoning is that “the kernel cache doesn’t contain any user info, and by un-encrypting it we’re able to optimize the operating system’s performance without compromising security.”

Encryption and Apple have been one of the headline-grabbing topics of 2016. It all began with two terrorists in San Bernardino who killed 14 people in December 2015. One of the shooters left behind a locked iPhone, which the FBI couldn’t access. The bureau asked Apple for help, and while the company initially complied, the FBI later got a judge to issue a court order demanding Apple to create a special tool that would offer backdoor access into the iPhone.

Apple rejected the order, saying that if such a tool fell in the wrong hands, its customers’ security and privacy would be at risk. The FBI eventually dropped the case, and a separate New York one, after it found a way to break into the respective devices. Since then, the U.S. Senate has been drafting encryption legislation and there has been more and more discussion about law enforcement dealing with locked devices as encryption is becoming a widespread standard feature on smartphones and in messaging apps like WhatsApp.

Producing a non-encrypted kernel could mean that Apple is beginning to encourage developers and users to report more bugs in its software — Apple’s response only mentions improvements designed to optimize iOS’ performance. At the same time, however, opening up the kernel also makes it easier for more people to take a look — and possibly find vulnerabilities or weaknesses in the operating system.

Apple did not respond to our request for comment.

Julian Chokkattu
Julian Chokkattu
Former Mobile and Wearables Editor
Julian is the mobile and wearables editor at Digital Trends, covering smartphones, fitness trackers, smartwatches, and more…
Topics
I visited Infinix’s first global flagship store, and it’s unlike any phone store I’ve been to
Phones, coffee, and robots: Infinix's Bali concept store was a delightful surprise
Infinix Flagship Store

I've been to plenty of smartphone stores over the years, and I can't tell any of these experiences apart. Picture neatly arranged tables, rows of smartphones, and the occasional accessory tucked away in a corner. Honestly, this works for most people who show up knowing exactly what they need and just leave.

So, when Infinix invited me to Bali for the grand opening of its first global flagship concept store, I was curious to see what the company had planned. I expected an elaborate showroom and a few extra things, like eye-catching installations to celebrate the occasion. And while there were a few of these, a lot of the things that actually caught my eye were permanent parts of the store.

Read more
Apple’s supply chain power is legendary, but a new report says it’s downright brutal  
Whatever you've heard before, the reality is a lot more shocking.
Teradown view of an iPhone.

Ever wonder just how powerful Apple’s market status is? To give you an idea, here’s a passage from a searing report published by The Wall Street Journal published a few days ago:

“Around the end of 2015, Sandisk refused Apple’s requests to send additional supply because it already had customers willing to pay more. Blevins threatened a Sandisk salesman with retaliation, saying he would have Sandisk’s chief executive, Sanjay Mehrotra, “crawl on his knees” back to Apple, according to a person familiar with the call."

Read more
Android’s new ‘SMS of Death’ exploit can crash your phone without you doing anything
A malicious text message can disrupt calls and leave an Android phone stuck in a reboot loop, without the owner knowing what happened.
Samsung Galaxy S26 Ultra smartphone in blue color.

A security researcher has uncovered a serious vulnerability in Android that allows an attacker to remotely crash a smartphone using a specially crafted text message. Dubbed "SMS of Death," the flaw can disrupt cellular services, disconnect ongoing calls, and even leave a phone stuck in a reboot loop. The troubling part is that the recipient doesn't have to interact with it at all.

The flaw, tracked as CVE-2026-58882, was discovered by security researcher Mark Blaszczyk, who first notified Google about it in May. On October 29, he published his findings alongside a working demonstration, after successfully reproducing the attack on Google Pixel and Samsung Galaxy smartphones. Google has already developed a fix, but its availability across Android devices is another matter.

Read more