Elcomsoft researches discovered a major security flaw in the iOS 10 backup protection mechanism. They discovered an alternative password verification mechanism added to iOS 10 backups. The new mechanism skips certain security checks, allowing to try passwords approximately 2500 times faster compared to the old mechanism used in iOS 9 and older. You can read more about it in Elcomsoft blog.
