cordova-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Loic Pfister" <>
Subject Re: [Cordova] Cache encryption
Date Fri, 05 Jul 2013 16:55:47 GMT

I was wondering the same thing so I had a look at the cordova code for android & ios.

For Android:
Nothing is done, which means it will be only encrypted if the user decide to encrypt the full
phone using android os encryption mechanism.

For iOS:
Same here nothing is done,
The only difference is that the all hard drive is encrypted by default. And ios decrypt on
the fly the info.

However of your device is running (or if no pass code is set) then the attacker can have full

One thing we could for iOS is to use the data protection api which them rely on the passcode
for encryption and make it much secure (if a passcode is set) however this cannot work with

@dev: i can inplement the security based on passcode for ios if useful for someone? Is there
a ticket for this?



AdNovum Singapore Pte. Ltd.
Loïc Pfister, Software Engineer
Master of Science MSc in Communication Systems EPFL

On 6 Jul, 2013, at 0:18, Filip Maj <> wrote:

> My understanding is that Android cache and local storage are both
> encrypted by the OS as well, but I will defer to Joe's input on that /
> providing links to documentation that it is so. Joe should be back in
> action next week.
> On 7/5/13 12:34 AM, "Shazron" <> wrote:
>> On iOS, we rely on OS encryption, we do nothing to encrypt explicitly.
>> See:
>> (doc may not be up to date, and should be moved to the Apache wiki)
>> On Thu, Jul 4, 2013 at 11:24 PM, Nguyen Van Duy1 <> wrote:
>>> Hello,
>>> Thanks for the great project Cordova!
>>> I have a very quick newbie question: Does Cordova encrypt the cache
>>> data?
>>> If encrypting data is a fundamental requirement before saving them to
>>> disk, do you have any suggestion how to make it work in Cordova? Thanks
>>> a
>>> lot.
>>> Regards - Duy.
View raw message