iOS Forensics

25/04/2012 - 13:37 by poney

Starting from iPhone 3GS, iDevices contain a cryptographic chip that performs hardware encryption of the filesystem. The NAND chip is a flash memory organized as the following:

  • Block 0: contains the LLB
  • Block 1: contains the following encryption keys:
    • EMF: used to encrypt the filesystem
    • Dkey: used to encrypt the …
read more