Re:How I Hacked Telegram’s “Encryption”
by ch0wn on Monday February 23, 2015 @01:33PM
(#9095976)
The files under `/data/data/[pkgname]` are only readable by the corresponding application. Encrypting them wouldn't add any security as the key for that cache would also be stored on the device.
[ Parent
| on HN ]
Re:How I Hacked Telegram’s “Encryption”
by itistoday2 on Monday February 23, 2015 @01:42PM
(#9096054)
> Encrypting them wouldn't add any security as the key for that cache would also be stored on the device.
That's why you use a user-derived key (i.e. based on the pin or w/e).