BBM Enterprise application encryption for data at rest

The BBM Enterprise application database is encrypted. BBM Enterprise uses an SQLCipher database, initialized with a passphrase, to store the BBM Enterprise content. BBM Enterprise generates a block of random data (48 bytes) to use as the passphrase. The passphrase is random, unique to each BBM Enterprise app, and used each time the BBM Enterprise app starts on a device. BBM Enterprise encrypts the passphrase and stores it in the platform’s specific keystore. For Windows, BBM Enterprise encrypts the passphrase with DPAPI and stores the results locally.