Maxime Rossi and Damiano Melotti - Dissecting the Modern Android Data Encryption Scheme

Research Motivation

Researchers Maxime Rossi and Damiano Melotti of quarex lab explain Android data encryption at rest, triggered by a Pixel Titanium chip inquiry after water damage killed the main SoC but left the secure element alive—they could not recover data and sought to map why the application processor remains essential.

Encryption Architecture

Android encrypts files per-object with keys derived from a master key; metadata uses separate protection. Features like Direct Boot and multi-user support rely on per-file keys. Keys may live in TEE Keymaster or StrongBox hardware, with raw key material never leaving protected environments.

Software-Only Attack Models

They present two proof-of-concept software attacks assuming plentiful bugs—no hardware or crypto breaks—exploring how authentication gates access to credential-encrypted keys and application IDs. The talk clarifies that successful decryption requires authenticated user credentials even when secure elements survive, defining the trust boundary defenders must protect.