Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

With FileVault 2, you can encrypt the hard-drive such that users on the computer can decrypt it with either of their passwords

How does this work?

share|improve this question
add comment

1 Answer

up vote 3 down vote accepted

My guess would be that it really encrypts the drive with a master key, then encrypts copies of the master key using valid user's passwords. Enter your password, and the system decrypts the master key. It then uses the master key to decrypt the data.

UPDATE

I found a cnet article which says:

The way FileVault 2 works is that the OS sets up a recovery partition that is used to store the encrypted keys used to unlock the encryption. The recovery partition is created for all Lion installations and is used for maintenance of the system, but will be a requirement to have if you wish to enable full disk encryption on the boot drive.

When the system boots, it accesses the recovery drive and loads the login screen to present to you. When you then supply your password it unlocks the boot drive and continues to load the OS and your user account before dropping you to your desktop. As a result of this, the preboot login screen may show much quicker on systems with FileVault 2 enabled than on those that do not.

This doesn't exactly tell (and the exact details are probably not out there), but it could be as I originally said. What I described would be more secure than just storing the master key in plaintext.

share|improve this answer
    
FileVault has the functionality to both allow and disable user accounts from booting up the encrypted drive. In this model (master key stored encrypted on the recovery drive), what would happen if there were two accounts authorized to boot the drive, one with the password 'test' and one with a decent 30-character passphrase? Is the drive more vulnerable because of that first account? Also, what if when the drive was first encrypted, the user account on that machine has a bad password, such as 'test.' Does the generated master key then have less entropy, and thus the drive is more vulnerable? –  RobertR Sep 16 '13 at 16:04
    
@RobertR, I think it would be better if you asked that as a separate question on this site. –  mikeazo Sep 16 '13 at 16:10
    
thanks, you're right, it is complex enough to be its own question. I have posted it as question #42501 –  RobertR Sep 16 '13 at 16:37
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.