Backup keybag
Definition
A data structure in iOS encrypted backups that holds the per-class encryption keys used to protect individual files. The keybag itself is wrapped by a key derived from the backup password using PBKDF2. Without the correct password, the keybag cannot be unwrapped and file content remains encrypted.
Related terms
- ADB backup
- An Android Debug Bridge backup produced by the adb backup command. The output is a TAR archive prefixed by a small plaintext...
- allowBackup flag
- An Android manifest attribute (android:allowBackup) that controls whether an app's data is included in ADB backups. When set to false the app's...
- CLOUD Act
- The Clarifying Lawful Overseas Use of Data Act (US, 2018). Clarifies that US service providers must comply with valid US legal process...
- Domain (iOS backup)
- A prefix in the iOS backup manifest that identifies the origin of each backed-up file. Common domains include HomeDomain (the device home...
- Manifest.db
- The SQLite database at the root of every iTunes local backup. It maps each backed-up file to its SHA-1 hash filename, recording...
Explained in
- Device Backup ForensicsA data structure in iOS encrypted backups that holds the per-class encryption keys used to protect individual files. The keybag itself is wrapped by a key deri...