How Apple Decrypts iPhones

Quinn Mahoney (via John Gruber): No, a signed ramdisk means the brute force is done on-device. The 10 attempt limit is enforced by iOS, ramdisk bypasses that.