Apple vs FBI: The Encryption Fight Explained

The Apple vs FBI dispute is a recurring legal and technical conflict over whether Apple must help law enforcement unlock encrypted iPhones. The core question is whether a technology company can be compelled to create software that bypasses its own security, and the answer has shifted with each new case and court ruling.

Formula

The calculator above estimates how long it would take to try every possible encryption key of a given length, assuming a certain number of guesses per second. The formula is:

Time (seconds) = 2^t / g

Where:

• t = encryption key length in bits (e.g., 256 for AES-256)
• g = number of key guesses per second (a measure of computing power)

The result is then converted to years by dividing by the number of seconds in a year (60 × 60 × 24 × 365.25).

Worked Example

Using the default values: a 256-bit key and 1 billion guesses per second.

1. Number of possible keys = 2²⁵⁶ ≈ 1.16 × 10⁷⁷
2. Time in seconds = 1.16 × 10⁷⁷ / 1,000,000,000 = 1.16 × 10⁶⁸ seconds
3. Time in years = 1.16 × 10⁶⁸ / 31,557,600 ≈ 3.67 × 10⁶⁰ years

The calculator shows 3.68 × 10⁶⁰ years (rounded to two decimals). This is astronomically larger than the age of the universe (about 1.38 × 10¹⁰ years), which is why brute-force is considered impossible for modern encryption.

Background: The 2016 San Bernardino Case

The public fight began in February 2016 after the FBI recovered an iPhone 5c used by Syed Rizwan Farook, one of the shooters in the San Bernardino terrorist attack. The FBI wanted Apple to create a custom version of iOS that would disable the phone’s auto-erase feature and allow unlimited passcode guesses, effectively bypassing the device’s security. Apple refused, arguing that such software would be a “backdoor” that could be used on any iPhone, not just the one in question.

The FBI obtained a court order under the All Writs Act, a 1789 law that allows federal courts to issue orders necessary to carry out their functions. Apple challenged the order, and the case became a lightning rod for debates about privacy, security, and government power. The fight ended anticlimactically when the FBI announced it had purchased a hacking tool from a third party (reportedly from the Israeli company Cellebrite) to unlock the phone, and the court order was withdrawn.

How iPhone Encryption Actually Works

Modern iPhones (since the iPhone 5s, 2013) use a dedicated hardware component called the Secure Enclave. This chip stores a unique ID (UID) that is fused into the processor at manufacturing and never exposed to software. The UID is combined with the user’s passcode to derive the encryption key for the device’s data. This means:

• Without the passcode, the data is mathematically unreachable.
• Even Apple cannot decrypt the data, because it does not have the UID or the passcode.
• Brute-force attempts are slowed by the Secure Enclave’s built-in delays and the option to erase data after 10 failed attempts.

When the FBI asks Apple to create a “backdoor,” they are asking Apple to write code that would bypass the Secure Enclave’s protections—something Apple says would weaken the security of every iPhone.

Key Legal Arguments on Both Sides

The legal debate centers on two competing principles:

• Government’s position: Law enforcement has a duty to investigate crimes and prevent terrorism. The All Writs Act allows courts to compel companies to provide “reasonable assistance” that does not impose an “undue burden.” Unlocking one phone, they argue, is a minor burden compared to the public safety interest.
• Apple’s position: Creating software that bypasses encryption is not a minor burden—it is a dangerous precedent. Once such a tool exists, it could be stolen, leaked, or demanded by other governments. Apple also argues that the First Amendment protects code as speech, and that forcing them to write code violates their rights.

In 2016, the court sided with the FBI initially, but the case was never fully adjudicated because the FBI found an alternative. Since then, similar cases have produced mixed results. In 2020, the FBI asked Apple to unlock a shooter’s iPhone in Pensacola, Florida, but again withdrew the request when a third party helped. In 2024, a US magistrate judge ordered Apple to assist the FBI in a case involving a drug suspect, but Apple appealed, and the outcome is still pending.

Common Misconceptions

Several myths persist about the Apple-FBI conflict:

• “Apple can unlock any iPhone anytime.” False. Apple cannot decrypt data on modern iPhones without the user’s passcode. They can only restore a device to factory settings, which destroys the data.
• “The FBI only wanted one phone.” In the San Bernardino case, that was true, but the technique would have worked on any iPhone running the same iOS version. Apple’s concern was that the tool would be reused.
• “Encryption is only for criminals.” Encryption protects everyone—journalists, activists, medical records, financial data, and personal privacy. Weakening it for law enforcement also weakens it for everyone else.
• “There’s a simple compromise.” Some suggest a “golden key” that only the government can use. Security experts point out that such a key would be a single point of failure; if it leaked, all encrypted data would be exposed.

How the Dispute Has Evolved

After 2016, the fight shifted from courtrooms to policy and technology. Apple has steadily strengthened iPhone security: in 2018, they introduced USB Restricted Mode, which disables the Lightning port’s data transfer after an hour of inactivity, making it harder for tools like GrayKey to extract data. In 2020, they added a feature that requires the user to unlock the iPhone with a passcode before it can be connected to a computer. The FBI and other agencies have responded by purchasing more sophisticated tools from private vendors, creating a cat-and-mouse game.

Legislation has also been proposed. The “Lawful Access to Encrypted Data Act” (2020) would have required companies to provide decrypted data upon court order, but it did not pass. Similar bills in the UK and Australia have been enacted, requiring companies to provide assistance to law enforcement, but the practical implementation remains contentious.

What the Future Holds

The fundamental tension between privacy and security is unlikely to be resolved permanently. As encryption becomes stronger and more widespread, law enforcement will continue to seek access, and companies will continue to resist. The outcome will depend on:

• Court decisions in pending cases
• New legislation in the US and abroad
• Technological developments (e.g., quantum computing could eventually break current encryption, but that is decades away)
• Public opinion, which tends to shift after high-profile terrorist attacks

For now, the practical answer is that the FBI can often gain access to iPhones through third-party tools or by obtaining the passcode through legal means (e.g., a search warrant or forensic analysis of the user’s other devices). The cases where Apple is asked to help are rare and usually involve older models or specific circumstances.

Frequently Asked Questions

Did the FBI ever unlock the San Bernardino iPhone?

Yes. The FBI unlocked the iPhone 5c using a tool purchased from a third-party vendor, but they never revealed the exact method. The phone reportedly contained no relevant data, which led some to question whether the legal battle was worth it.

Can Apple read your iCloud backups?

Yes, if you back up your iPhone to iCloud, Apple can technically access that data because it is stored on their servers. iCloud backups are encrypted, but Apple holds the encryption keys. This is why law enforcement often requests iCloud data instead of trying to unlock the device itself.

Is it illegal to refuse to help the FBI?

Not automatically. Companies have a legal obligation to comply with valid court orders, but they can challenge them. In the 2016 case, Apple was initially ordered to help, but the order was vacated. The law is not settled; each case is decided on its own merits.

What is the All Writs Act?

The All Writs Act is a 1789 US law that grants federal courts the authority to issue orders necessary to enforce their jurisdiction. It has been used to compel companies to provide technical assistance, but its application to encryption is controversial because the “assistance” may be unprecedented and burdensome.

Does Apple have a backdoor in its software?

No. Apple has consistently stated that it does not create backdoors, and security researchers have not found any. However, Apple does comply with government requests for data stored in iCloud, which some consider a form of access.

What can I do to protect my iPhone data?

Use a strong passcode (at least 6 digits, ideally alphanumeric), enable two-factor authentication for your Apple ID, and consider not backing up sensitive data to iCloud. Also, keep your iOS updated, as each update typically includes security patches.

Related

• China’s IPv9 Decimal Network Project Explained
• Fix Wired Earbuds That Only Work in One Ear
• What to Check Before Buying the Dip in Indian Shares

in t | Encryption key length (bits) | bits | 256 | 0 | 4096
in g | Estimated guesses per second | guesses/s | 1000000000 | 1 | 1000000000000000
out brute_time | Time to brute-force all keys | years | (2^t / g) / (60*60*24*365.25) | 2
out brute_years | Same time (human-readable) | years | (2^t / g) / (60*60*24*365.25) | 0