3 ms·
AFAIK the encryption key is stored in plaintext unless you also set a passcode (many people don't), and even if you set a passcode, most of the time it's just a
by kijin 13y ago
AFAIK the encryption key is stored in plaintext unless you also set a passcode (many people don't), and even if you set a passcode, most of the time it's just a short number that would be trivial to brute-force in an offline attack.
Of course it's also possible to use eCryptFS with a four-digit passcode, but it's strongly recommended against. The main difference between FBI-proof encryption and pickpocket-proof encryption is not in the algorithms used, but in the typical use case of each.
- pflats 13y agoYeah, I was specifically addressing "The contents of the phone usually aren't encrypted". If you have a passcode (which is required for TouchID) then your iPhone is encrypted. You can definitely brute force it. I saw an article somewhere (probably here on HN) addressing the fact. I can't find it, but if I remember correctly, it said something about Apple or an associated company quietly offering forensic help to police on bypassing the password. I think it implied they were using a ramdisk to brute force the encryption. edit: Found an Ars article about Apple doing it, but it doesn't mention anything about a ramdisk. http://arstechnica.com/apple/2013/05/apple-will-reportedly-unlock-your-iphone-for-police-but-theres-a-wait-list/ http://arstechnica.com/apple/2013/05/apple-will-reportedly-u...