fruitydrink

@Samuel_Michon I take issue with the crap you are spreading.

>if someone has physical access and unlimited time There is no such thing as unlimited resources.

If I had unlimited time I could crack every encrypted message on the planet.

Using DPAPI turns a 30 second hack into an online cracking job. The crypto processor in the iPhone can only check one password every ~80ms and you need the chip with you. An attacker cannot do an offline attack.

Well that's a non-issue, a locked iPhone will secure Mail.apps data it won't secure Mailbox because Mailbox hasn't told the phone to.

You can retrieve data from the device with special equipment after opening the phone. This is beyond the typical "geek".

If you jailbreak the phone you can access all non protected data.

iOS Mail app uses DAPI correctly. For push mail when the phone is locked it will use a public key to encrypt the data.

I am unsure if even the Gmail app uses it correctly, I only tested the stock mail app.

If you have the an escrow key pair (ie. synced to iTunes) your are screwed. If should do a DFU mode restore to wipe the keybag completely.