Secure Enclave
The secure subsystem in Apple devices that runs separately from the main processor and protects biometric data and keys.
// EXPLANATION
It has its own boot memory and encryption engine. Face ID / Touch ID templates never leave the device; the main operating system only receives a "matched / not matched" answer.
// ALSO KNOWN AS
Secure Enclave
// RELATED TERMS
TEE (trusted execution environment)A secure processing area, isolated from the main operating system by hardware, in which sensitive code and data are protected.
ARM TrustZoneThe ARM security technology that splits the processor at hardware level into a "secure" and a "normal" world to isolate sensitive operations.
Samsung KnoxSamsung's mobile security platform spanning hardware and software layers; Knox Vault protects keys with a separate processor and memory.