[Infowarrior] - Lost iPhone? Lost Passwords! / Practical Consideration of iOS Device Encryption Security

[Richard Forno]

(c/o MS)

Lost iPhone? Lost Passwords!

Practical Consideration of iOS Device Encryption Security

Jens Heider, Matthias Boll
Fraunhofer Institute for
Secure Information Technology (SIT)
February 9, 2011

Abstract

The paper highlights risks that accompany losing a locked iOS device 
regarding conÞdentiality of passwords stored in the keychain. It 
presents results of hands- on tests that show the possibility for 
attackers to reveal some of the keychain entries. For the described 
approach, the knowledge of the user's secret pass- code is not 
needed, as the protection provided by the passcode is bypassed.


http://www.sit.fraunhofer.de/en/Images/sc_iPhone%20Passwords_tcm502-80443.pdf