Could Apple build a backdoor into it's FileVault encryption technology? Is that a risk you take of using a closed-source encryption product in general? Would using something like TrueCrypt be more reliable?
Tell me more
×
IT Security Stack Exchange is a question and answer site for
IT security professionals. It's 100% free, no registration required.
|
|
I would be less worried about a backdoor than sheer weakness as an encryption scheme. This article appeared in February this year and was the first thing that came up when I typed "decrypt filevault" in google: http://reviews.cnet.com/8301-13727_7-57369983-263/filevault-2-easily-decrypted-warns-passware/ You should check out TrueCrypt, as they are evidently purely devoted to mac disk encryption. Probably any non-costly or self-made system will be reversible in the right hands, partly due to the fact that the decrpyter would be smart to assume one of those methods (free or supplied with the operating system) were used, which is essentially removing one variable in the search for the decryption key. |
|||||||||||
|
|
To answer the question, yes - it is possible that Apple could build a backdoor into its encryption system. However, and I cannot stress this enough - there is no reason why Apple will do this. The fallout if it ever gets discovered would be enormous, probably enough to completely destroy the reputation and goodwill Apple has built up over the years. I would not be worried about a backdoor - just the strength of the encryption. I would suggest TrueCrypt, it is simple to use and reliable. |
|||
|
|
|
The simple answer is yes - any provider of software could build a backdoor into it. But would they? @Terry gives a good point about motivation, so my confidence would be high that they wouldn't want to add a backdoor, however you also need to be aware that governments and other pressures may force a company to add a backdoor. So if you have sensitive data, think about additional encryption... |
|||
|
|
