I'd like to encrypt my SD card for Android conveniently, safely and in a cross-platform way so that it can also be used on other devices. I asked about that here.
As of right now there doesn't seem to be a way to do that (an app on FDroid or Playstore which doesn't put data at risk and is secure and very convenient/easy/fast to use).
This is why I decided to keep using the Android's default way of encrypting the SD card. However, this way it's not possible to access the data from other devices. Here it has been described how data of the SD card can be decrypted from other devices but that way requires rooting the Android phone. Is it possible to do this without rooting the phone? In specific how could one get the .key file in /data/misc/vold
?
/data/misc/vold
? Not possible without root. And also that won't work for FBE as Robert said.dmsetup
should work even for devices with hardware-backed encryption. It's because in case of Adoptable Storage there are no user credentials, RSA key or middle key involved in encryption. Instead the master key in plain text is saved to/data/misc/vold
. Adoptable Storage relies on the hardware-backed secure encryption of internal storage (/data
).