0

Android File-Based Encryption is implemented via fscrypt. How do you backup and restore fscrypt encryption keys? Both the master keys and the per-file keys would need to be backed up.

2
  • 1
    From your first link 1.Keymaster/Keystore and Gatekeeper must be implemented in a Trusted Execution Environment 2.Hardware Root of Trust and Verified Boot bound to the keymaster initialisation is required to ensure that Device Encryption credentials are not accessible by an unauthorized operating system // TEE is something that cannot be accessed directly and calls to TEE information are severely restricted ( I am not technical enough to elaborate on this ) and it's virtually impossible to get information from TEE // So, IMO, you can't
    – beeshyams
    Commented Jun 1, 2021 at 10:30
  • 1
    Master keys are stored by TEE. You cannot clone them. Some key material that is used with master keys can be found in /data/system. As long as you are not doing factory reset or wiping /data through TWRP & reinitializing the OS, TEE will not flush master keys.
    – defalt
    Commented Jun 2, 2021 at 17:11

0

You must log in to answer this question.

Browse other questions tagged .