>MacBook Pro fingerprint sensor is approved for authentication
does the fingerprint sensor API return a signed response from the fingerprint sensor or SE? or is it a simple yes/no?. if it's the latter, the whole thing is security theater.
does the fingerprint sensor API return a signed response from the fingerprint sensor or SE? or is it a simple yes/no?. if it's the latter, the whole thing is security theater.
If it's a signed response, at some point there's another piece of code that checks that the signature is valid and returns a yes/no.
I think the reason Apple's sensor was mentioned in this instance was due to how Apple handled storage and usage of biometrics as described in here https://www.apple.com/business/docs/iOS_Security_Guide.pdf
Compare that to, say, other laptop vendors: https://support.lenovo.com/us/en/product_security/len-15999