I use Core Data to store sensitive information. So far, I have applied hardware file encryption to the SQLite file used by the persistent storage coordinator. I did this by setting its file attributes (NSFileProtectionKey to NSFileProtectionComplete).
I store some image data as binary data in the kernel database, and I disabled “Allows external storage” and “Store in an external write file” to prevent my SQLite data store from bloating and improve performance.
I assume that data files automatically stored outside of Core Data's SQLite database will NOT be encrypted and that I will need to encrypt these files myself. Does anyone know if this is correct?
thank
source
share