Keychain security

[drewcosten]

I remember reading an article back in February about some German security company being able to hack a locked iPhone in only a few minutes and read the keychain.

Has anybody heard anything about this still being an issue on iPhones running iOS 5?

 

[drewcosten]

I guess that's a no.

 

[munkery]

In iOS there are two separate keychains.

The without passcode keychain, which is the equivalent of the login keychain in OS X.

The with passcode keychain, which is the equivalent of a non-default keychain in OS X.

Only contents of the without passcode keychain were exposed via the method used by the german security researchers.

More security sensitive keychain entries, such as those to access email and website logins, are maintained in the with passcode keychain.