4 ms·
"Signal keeps its database encrypted using SqlScipher, so reading it requires a key. We found that acquiring the key requires reading a value from the shared pr
by throwaway888abc 6y ago
"Signal keeps its database encrypted using SqlScipher, so reading it requires a key. We found that acquiring the key requires reading a value from the shared preferences file and decrypting it using a key called “AndroidSecretKey”, which is saved by an android feature called “Keystore”.
Once the decrypted key is obtained, we needed to know how to decrypt the database. "
TLDR: which is saved by an android feature called “Keystore”, Android Keystore compromised ?
Original post:
https://web.archive.org/web/20201210150311/https://www.cellebrite.com/en/blog/cellebrites-new-solution-for-decrypting-the-signal-app/ https://web.archive.org/web/20201210150311/https://www.celle...