Practical Mobile Forensics - Third Edition

Data protection

Data protection is designed to protect data at rest and to make offline attacks difficult. It allows applications to leverage the user's device passcode in concert with the device hardware encryption to generate a strong encryption key. Later, the strong encryption key is used to encrypt the data stored on the disk. This key prevents data from being accessed when the device is locked, ensuring that critical information is secured even if the device is compromised.