iPhone logd Process Forensics

 

How do I obtain the salts that the logd process on iOS uses for redaction?

 

For instance consider the mDNSResponder process. When the logd process is printing mDNSResponder logs to the Console, my understanding is that it takes salt+data and then hashes that and then prints the resulting hash to the Console in the form of something like: 

 

%{private, mask.hash}.P   <HASH> [1]

 

Do you know of any method for obtaining the salts (from a jailbroken iPhone) that get used for something like this? 

 

I really only care about the salt for the mDNSResponder process, if that helps. 

 

Thank you,

James Pedersen

 

Sources:

[1] https://opensource.apple.com/source/mDNSResponder/mDNSResponder-1310.80.1/mDNSCore/mDNSDebug.h.auto.html