U
U
Uno2019-12-25 17:23:08
macOS
Uno, 2019-12-25 17:23:08

FileVault - ok, but is it possible to take dumps from the OP?

XTS-AES-128 with a 256-bit key, password resets, etc., but how does filevault work with RAM? Is it possible to take a dump from it and see what I did the last time I used the PC?
I heard about Passware and that they used an exploit to recover a private key from RAM in less than forty minutes in older versions.
Does this thing encrypt, by the way, the Windows 10 bootcamp next to it on the disk? Sorry for the weak materiel for iron and its logic. I am better at cryptography.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
Y
Yakov, 2020-01-03
@Noizefan

I can answer the last question, as I tested such scenarios in practice; Unfortunately, I can't help you with the first one.
FileVault only encrypts the partition containing the current copy of macOS.
If you install a second copy next door, FileVault can be turned on and off independently of the first; the encryption key will be separate.
If you install Windows in Boot Camp, you will not be able to use FileVault on this partition - you will need separate tools (BitLocker or something similar).

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question