FDE
Definition
Full Disk Encryption. Default on modern Android (file-based encryption since Nougat) and iOS. Encryption keys are tied to the user passcode and a hardware key in the Secure Enclave or TrustZone.
- Full name
- Full Disk Encryption
- Android
- File-based encryption default since Nougat
- iOS
- Default since early versions
- Key anchor
- Secure Enclave or TrustZone
Common questions
Why does FDE make mobile forensic acquisition harder than it was on older unencrypted devices?+
Because the encryption key is derived from the user passcode combined with a hardware-bound key stored in a secure element, an examiner without the passcode cannot decrypt the data even with full physical access to the storage chip, unlike older devices where a raw chip-off read exposed data directly.
Does FDE mean encrypted data is completely unrecoverable without the passcode?+
Not always. Some acquisition methods target the device while it is in an unlocked or AFU (after first unlock) state, exploit vulnerabilities in the boot chain, or use vendor-assisted extraction, but these depend on the specific device, chip and OS version rather than being generally reliable.
Related terms
- CDR
- Call Detail Record. Telco-side log of A-party, B-party, start time, duration, IMEI, IMSI and serving cell ID. Lawful-intercept output under the IT...
- Chip-Off
- NIST SP 800-101 R1 Level 5 acquisition. Desoldering the NAND or eMMC chip from the PCB and reading it directly with a...
- Faraday Bag
- A signal-blocking pouch with conductive mesh lining that prevents cellular, Wi-Fi, Bluetooth and NFC signals from reaching a seized phone. The standard...
- ICCID
- Integrated Circuit Card Identifier. The serial number of the physical SIM card itself, stored in EF_ICCID. It identifies the card as a...
- IMEI
- International Mobile Equipment Identity, a 15-digit identifier of the handset hardware. Format is 8-digit TAC + 6-digit serial + 1-digit Luhn check....
- IMSI
- International Mobile Subscriber Identity. A 15-digit number stored in EF_IMSI on the SIM that uniquely identifies the subscriber account on the mobile...
- MSISDN
- Mobile Station International Subscriber Directory Number. The dialable phone number. Stored on the HLR, not always on the SIM.