Hacker News new | ask | show | jobs
by ch0wn 4131 days ago
The files under `/data/data/[pkgname]` are only readable by the corresponding application. Encrypting them wouldn't add any security as the key for that cache would also be stored on the device.
1 comments
itistoday2 4131 days ago
> Encrypting them wouldn't add any security as the key for that cache would also be stored on the device.

That's why you use a user-derived key (i.e. based on the pin or w/e).

link