Toggle sidebar Toggle sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

iOS Core data Encryption

Soulstorm

Soulstorm

macrumors 68000
Original poster
I have an application almost ready, which relies heavily on Core Data. I was wondering what is the best way to use encryption with core data. I know that CommonCrypto is available for the iPhone, but what would be the best method to use it?

I lean towards encrypting the .sqlite file that Core Data uses with AES-128 on application quitting, and decoding it on application Launch.

Do you agree that is the best method, or is there a better method?
 
AES-128 is breakable on modern hardware in a fairly short space of time, so depending on how sensitive the data you're encrypting is you might consider AES-256 (though presumably a serious attacker would just freeze the device and extract the key from memory).

How are you enforcing a strong key if users have to type it every time the app launches?
 
I also used .sqlite file and it works great on me. That's right, you have to make sure that using the data encryption tool won't sabotage it's main purpose, which is to securely encrypt data.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back