@Samuel_Michon
I take issue with the crap you are spreading.
>if someone has physical access and unlimited time
There is no such thing as unlimited resources.
If I had unlimited time I could crack every encrypted message on the planet.
Using DPAPI turns a 30 second hack into an online cracking job. The crypto processor in the iPhone can only check one password every ~80ms and you need the chip with you. An attacker cannot do an offline attack.
>if someone has physical access and unlimited time There is no such thing as unlimited resources.
If I had unlimited time I could crack every encrypted message on the planet.
Using DPAPI turns a 30 second hack into an online cracking job. The crypto processor in the iPhone can only check one password every ~80ms and you need the chip with you. An attacker cannot do an offline attack.