I set a strong passphrase for my primary unlock and 2-factor fingerprint ( fingerprint + 6 character PIN ) on my OWNER profile.
Suppose the phone is rebooted and is in BFU state. If there is an exploit for the Titan chip that allows brute force, can my profile be accesed by bruteforcing the PIN from secondary unlock? Or is the fingerprint+pin encrypted with the primary unlock password and is inaccesible until the primary password is used at boot?
What about the security of the new private space feature? From what I understand it is basically a different profile so it has no connection to the main unlock password of the OWNER profile and there is no 2-factor fingerprint available. The scenario here will be different: If the phone is in a BFU state and the filesystem is extracted, can my fingerprint be converted to the required bits and used to decrypt data from the private space without the main unlock password?
In a nutshell, are the main and secondary unlock methods DISTINCT ways of accessing secrets in the secure element or is the secondary unlock encrypted with the main unlock?
Thanks