How secure the encryption actually is? What would it take to descrypt the storage if you have physical access to the device and expertise?
>>109426888Holy ESL
>>109426902yeah, i spelled it wrong. it's a new word for me.
>>109426888>What would it take to descrypt the storage if you have physical access to the device and expertise?a few punches to the facegraphene relies on google's special hardware to prevent attackers from bruteforcing the pin. it will enforce that you wait a given time after entering invalid pins multiple times. Nevertheless, you can brute force most pins by hand as people usually don't put secure pins.The other solution is to dump encryption keys/secrets from memory while the phone is decrypted. However graphene will automatically reboot every ~24h (configurable)And 24h is a very short window if you need to read the phone's ram.
>>109427571Device is automatically rebooted after encryption is complete. They also say they delete the keys to make it irrevesible, at least from the OS enviroment. What I'm asking is can you stilly decrypt the storage using 3rd party tools. I know you can recover wiped data unless it was overwriten. I'm not sure if there are practical solutions to restore information from an ecrypted storage you can't decrypt.
>>109426888Jesus Christ, fucking learn English if you're gonna start making threads here ffs
>>109427691Sorry
>>109427645That's not how disk encryption works.Basically, when you encrypt a volume, it generates a random key fully independent from your passphrase. That's actually what you need to decrypt the data, but that key is very long and almost impossible to remember.So instead, you can set a custom passphrase, but that's not the real encryption key. Basically, that shorter key is the encryption key to a small encrypted volume that contains the actual encryption passphrase/keys.That's how you can change pins without re-encrypting the entire drive.So technically speaking, the actual key is never exchanged, written down, or memorized. You only need to overwrite that small volume containing it to make your data irrecoverable. Then of course the phone resets the partition table, but the encrypted data is still there, but unrecoverable, even if later on you get the real phone pins that was used to secure it.
