3 ms·

I'm pretty sure that iPhones have encrypted their data since the 3GS. That's how they "remote wipe" it. They send a message to the phone to delete the encryptio

• kijin 13y ago
  AFAIK the encryption key is stored in plaintext unless you also set a passcode (many people don't), and even if you set a passcode, most of the time it's just a short number that would be trivial to brute-force in an offline attack. Of course it's also possible to use eCryptFS with a four-digit passcode, but it's strongly recommended against. The main difference between FBI-proof encryption and pickpocket-proof encryption is not in the algorithms used, but in the typical use case of each.
  • pflats 13y ago
    Yeah, I was specifically addressing "The contents of the phone usually aren't encrypted". If you have a passcode (which is required for TouchID) then your iPhone is encrypted. You can definitely brute force it. I saw an article somewhere (probably here on HN) addressing the fact. I can't find it, but if I remember correctly, it said something about Apple or an associated company quietly offering forensic help to police on bypassing the password. I think it implied they were using a ramdisk to brute force the encryption. edit: Found an Ars article about Apple doing it, but it doesn't mention anything about a ramdisk. http://arstechnica.com/apple/2013/05/apple-will-reportedly-unlock-your-iphone-for-police-but-theres-a-wait-list/ http://arstechnica.com/apple/2013/05/apple-will-reportedly-u...