Practical Mobile Forensics(Third Edition)
上QQ阅读APP看书,第一时间看更新

Encryption

On iOS devices (starting with the iPhone 4), the entire filesystem is encrypted with a filesystem key, which is computed from the device's unique hardware key. This key is stored in effaceable storage, which exists between the OS and hardware level of the device. This is the reason that JTAG and chip-off methods are not useful acquisition methods, as the entire data dump will be encrypted.