Is all data on the iPhone encrypted? Conflicting sources.

This page claims that data on the iPhone (running iOS greater than v4) is entirely encrypted: http://images.apple.com/iphone/business/docs/iPhone_Security.pdf

From page 3 of the PDF
<quote>
iPhone 3GS and new devices offer hardware-based encryption. iPhone hardware encryption uses AES 256-bit encoding to protect all data on the device. Encryption is always enabled, and cannot be disabled by users.
</quote>

However, if an iPhone running iOS 4 and using data encryption were to be jail broken (which does not require the passcode to perform) the user would then have direct access to all of the data on the device in an unencrypted state. Surely, the jail break process that takes mere minutes is not decrypting the entire iOS disk.

*So is all the data on the device really encrypted or did the marketing department make a mistake?*

Also, this page seems to suggest that only emails and their attachments are encrypted: http://www.apple.com/iphone/business/integration/

<quote>
To protect all data at rest, iPhone features built-in hardware encryption using AES 256-bit encoding. Building on the hardware encryption capabilities of iPhone, email messages and attachments stored on the device can be further secured by using Data Protection. Data Protection uses a user’s device passcode to generate a strong encryption key. This key prevents data from being accessed when the device is locked, ensuring that critical information is secured even if the device is compromised.
</quote>

*So can someone definitively answer whether or not all of the data on the iPhone is encrypted or not?*

My co-worker seems to think that all of the data on the iPhone is encrypted, but I'm calling shenanigans. There is no way the entire iPhone disk could be encrypted if people who jail break their phones can access the entire unencrypted disk in minutes.

iPhone 4, iOS 4, 4.1

Posted on Feb 17, 2011 1:57 PM

Reply
13 replies

Feb 25, 2011 3:34 PM in response to JesusRosenburg

If you go in with that kind of disrespectful attitude, I wouldn't be surprised if you don't get much help. Just because people are working retail to earn a living rather than for whatever important company you work for doesn't make them stupid or incompetent, any more than working where you work means you're smart.

If you are buying hundreds of phones, Apple, AT&T and Verizon all have corporate sales teams. Perhaps they would be more up to your standards of knowledge and professionalism.

Feb 25, 2011 3:25 PM in response to JesusRosenburg

Yeah, I appreciate the idea, but when I think technical ability, I don't think 'the genius bar' at an apple store. Those people aren't much more than glorified best buy employees, with some special training on using apple software tools. I need someone who knows what they are talking about, not a college kid who's just making a few bucks.

I find it rather sad that apple doesn't have a channel to get answers on corporate matters. One day maybe.

I might pass by the store and ask just for a laugh though. Thanks.

Feb 25, 2011 3:14 PM in response to JesusRosenburg

This is a user-to-user forum, everyone is a volunteer. If no one answers your question it's because either no one who knows the answer has seen the question or no one who has seen the question cares. Additionally, if this is mission critical, I'd think it would be safer to get an answer from Apple. There are Apple Stores Everywhere. Going and ask. Make an appointment at the Genius Bar if need be.

Best of luck.

Feb 25, 2011 3:55 PM in response to wjosten

I was looking for an official answer; save your ability to load PwnageTool or RedSnow and click buttons for someone who finds it impressive. I've been hacking phones since the Motorola StarTac, and much like your claims, no one cares or is impressed.

I'd like to thank everyone for their suggestions. Going to go spend some time with the kids now and forget all of you exist. Flame on.

Mar 12, 2011 2:54 AM in response to wjosten

So basically what you're saying is that you don't know, or that you'd rather be a ***** than actually help basically every corporate around the world.

As in all "End User Technical Support" you have the lucky break of actually talking to someone who knows their stuff, but 90% of the time "End-User Technical Support" personel you get to talk to, are there just because they can smile (even with their voice) and say "Hi, how may I help you today". It's a sad fact of life, you getting all hissy about someone pointing it out just proves the point.

You can stay all hissy and refuse to answer, or you could actually man up and answer, if you actually know the answer.

Mar 12, 2011 7:41 AM in response to EvenLessSpam

Ha Ha, thank you sir for seeing the forest for the trees. God forbid someone compare the all mighty apple geniuses to mere best buy employees. 'Genius' is in their job title, it's not what they are. And it's a rather pompous moniker if you ask me.

Really I have to apologize for this thread, I came here expecting real answers from people who understand the flaws in the operating systems and hardware, but it's rather apparent that even if there are answers to be found here, they are shrouded behind disbelief by apple fan boys (and girls).


I'll just chalk the answers in this thread up with some of the other fine answers I gotten from apple fan boys and 'Geniuses':

"Why can't I cut and paste files and folders in Finder?"
"WHY WOULD YOU WANT TO DO THAT User uploaded file??? JUST DRAG AND DROP!!"
"Sigh."


"Why doesn't Finder in OS X merge folders like every other modern OS?"
"Have you tried Forklift??!!"
"So... I'm expected to replace the core file handler in an awful hack to get functionality we've had for 15 years in other OSes AND pay money for it?"
"You sound like a windows user."
"I use all OSes, Linux more often, and they all have flaws. I was just pointing out one in OS X..."
"Why don't you go back to Windows?!!"


I hope everyone enjoys the kool-aid.

Mar 25, 2011 2:25 PM in response to JesusRosenburg

Data is encrypted. Yes, but the key is on the device.Encryption is ideal for protection of data at rest. Also (remote) wipe is very fast with this encryption, since simply the key has to be removed. But if someone can boot the iPhone they can read everything.
For additional security of sensitive data (keychain and mail) with iOS 4 the so called data protection has been added. Here the encryption key can be also the users passcode. If you boot such a device externally, you would simply be able to read encrypted data, at best.
Check last WWDCs Session 209, if you want to see all details.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Is all data on the iPhone encrypted? Conflicting sources.

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.