iOS Forensics
25/04/2012 - 13:37
by poney
Starting from iPhone 3GS, iDevices contain a cryptographic chip that performs hardware encryption of the filesystem. The NAND chip is a flash memory organized as the following:
- Block 0: contains the LLB
- Block 1: contains the following encryption keys:
- EMF: used to encrypt the filesystem
- Dkey: used to encrypt the …