Access is very difficult if the device is BFU + encrypted + current version; It is easier if AFU + cache is available.
BFU vs AFU
- BFU: device was turned on but no password was entered.
- AFU: password was entered at least once.
Access tools
- Cellebrite UFED.
- Magnet GrayKey.
- Open source (Frida, limited).
Jailbreak / root
- Easy access if it is already on the device.
- Doing it later would violate the integrity of the evidence.
Frequently asked
iPhone 14 BFU + encrypted; access?
Very difficult; vendor request.
Is Android different?
Similar to FBE (File-Based Encryption).
Cost?
Cellebrite license 50K+ USD/year.
Relevant legislation
- HMK art.199-205 — Presentation of documents and evidence.
- HMK art.400-405 — Determination; with witness / expert.
- CMK art.134 — Computer search, copying; hash chain.
- TCK art.243-245 — Computer crimes, digital evidence chain.
- e-Signature Law (5070) — Electronic signature and time stamp.
Legal notice: This article is for general information purposes; A meeting with a lawyer is required for a concrete case.