Dissecting the Modern Android Data Encryption Scheme

This technical talk follows Android’s file-based encryption key generation and storage, including the roles of user credentials, TrustZone, Gatekeeper, and Weaver. It demonstrates attacks on two credential validation and key derivation mechanisms using known software vulnerabilities.