Apple can't decrypt the phone. All they can do is make it easier to brute-force the password. If the firmware is cooperating and not introducing artificial delays, you can try one password every 80 ms. In later versions of the phone, the hardware enforces a 5-second delay which you might not be able to work around even with cooperative firmware.
