does file vault recovery key help with password for a mac?

Does File Vault Recovery Key Help With For A ? Password That Is

The value of X is stored alongside the data, e.g.

For example, if you know P, you can decrypt C to find out the KEK.

Once you know the KEK, you can decrypt X to find out the MEK.

No re-encrypting of the data itself is necessary, since the MEK being used doesnt change.

Does File Vault Recovery Key Help With For A ? Password That Is

When you set up authorised users and passwords in FileVault preferences, one of these slots is used to store a C which can be decrypted using the recovery password that is displayed to you.

With APFS, encryption is done on a per volume basis, so the same KEK is used to encrypt multiple MEKs, one for each APFS volume; the standard refers to each such MEK as a VEK (volume encryption key).

There may also be some cryptographic security argument about mitigating against chosen-ciphertext attacks or some such, but I cant be sure right now.

In any case, it is definitely necessary for APFS, given its per volume encryption.

I dont know anything about LUKS, so I cant help you with the details.

The 120 bit recovery key is encoded with all letters and numbers 1 through 9, and read from devrandom, and therefore relies on the security of the PRNG used in macOS.

During a cryptanalysis in 2012, this mechanism was found safe.15.

Probably FileVault is destroying the key after successful encryption.

And then when you ask for access, it takes your password (which you typed as pass to system), runs through algorithms, salting and hashing it.

And THEN FileVault trying to access hard drive using this key, recently generated from your password.

Not the answer youre looking for Browse other questions tagged macos security encryption filevault.

This site is not affiliated with or endorsed by Apple Inc.

Does File Vault Recovery Key Help With Password For A Mac?