Hardware Security Features: -
It has a dedicated AES-256 crypto-engine built into Directed Memory Access (DMA) path between the flash storage and main system memory making encryption more efficient. Each device has a userID(UID) and groupID(GID) which are 256 bit keys. They are created and stored in application processor directly, no hardware or software can access them directly.
File Data Protection: -
It protects the file data by constructing and managing a hierarchy of keys in conjuction with hardware encryption engine which will use per-file key to encrypt the file. The per-file key is wrapped with corresponding class keys. The AES engine decrypts the file contents read from the flash storage.
Passcodes: -
It is an important element to iOS security, by setting up Passcode, it is automatically enabled by iOS. It is used for generating encryption keys hence stronger your passcode stronger your encryption keys are generated.
KeyChain Security: -
IOS keychain item contains metadata such as creation/modification of time stamps and access group of keychain. All these contents are encrypted using AES 128 in Galois/CounterMode(GCM).
Study Material
Quiz