16Mar
How does a pattern or a PIN secure an Android device with encryption?
Modern Android devices have encryption for the storage. It is secured with a key which is derived from the lock screen and a hardware bound key.
We know that the rate limiting mechanism prevents brute forcing the PIN on the device, but what actually prevents a thief, after stealing the phone, from disassembling the hardware and extract the key material, and also the storage in it, while brute forcing the pattern or PIN offline by connecting the storage onto a computer?
