Specifications

Tablets encrypt data stored in the personal file system if you set the "Personal Space Data Encryption" IT policy rule to Yes
or if the user turns on encryption for personal data using the Encryption option in the Security settings on tablets. Tablets
encrypt data stored in the personal file system using XTS-AES-256 encryption.
How BlackBerry PlayBook tablets protect work data
BlackBerry PlayBook tablets are designed to encrypt data stored in the work file system using XTS-AES-256.
Tablets use a randomly generated 512-bit file encryption key to encrypt the contents of a file. The file encryption process
creates a security record for the encrypted file that consists of a 512-bit random salt, the file encryption key, and several
attributes of the file. Tablets encrypt the file security record using the domain key, which is a 512-bit randomly generated
key.
Tablets use the domain key to encrypt all file security records in the work file system. The domain key is stored in a security
record that is similar to the file security record. The domain security record is encrypted using the work space key. The
work space key is stored in RAM and is not written to persistent storage on the tablet.
The tablet system key and the domain key are stored in NVRAM on tablets and are encrypted with a key that is stored in the
replay protected memory block in flash memory. The replay protected memory block is encrypted with a key that is
embedded in the processor when the processor is manufactured.
Tablets can also encrypt the data stored in the personal file system if you set the "Personal Space Data Encryption" IT
policy rule to Yes or if users turn on encryption for personal data using the Encryption option in the Security settings on
tablets.
Related information
How a BlackBerry PlayBook tablet protects personal data, 67
Security Technical
Overview
Using BlackBerry Balance to secure BlackBerry PlayBook tablets in your organization’s environment
for work use
64