The key is berated by mixing the entered pin with a hardware key that cannot be read by the rest of the phone; an encryption unit takes an input pin and outputs the resulting key if the code is correct. The hardware key is not accessible to the rest of the phone, and can be wiped if there are too many wrong guesses. Attempting to desolder the chip holding the hardware key would automatically wipe it.