iOS Forensics: cprotect.h

It is important for you to understand this attribute.

struct cp_xattr {
 u_int16_t xattr_major_version;
 u_int16_t xattr_minor_version;
 u_int32_t flags;
 u_int32_t persistent_class;
 u_int32_t key_size;
 uint8_t  persistent_key[CP_WRAPPEDKEYSIZE]; 
}; 

Playing around with iPhone...:)