Page 1 of 1

Apple Filevault issue

Posted: 14.10.23, 07:03
by Continuum
I have a drive with apply fielvault on it, but the recovery partition has bad sectors in the catalogue file.

Does anyone know the hex from the beginning of the EncryptedRoot.plist.wipekey file, and if so, how big is it, so I can just extract it if it exists on the partition without a catalogue reference.

Re: Apple Filevault issue

Posted: 16.10.23, 16:37
by Doomer
it's encrypted, so the hex depends on the encryption key

Re: Apple Filevault issue

Posted: 16.10.23, 23:23
by Continuum
So the encryption key is also encrypted?

Re: Apple Filevault issue

Posted: 17.10.23, 19:42
by 300ddr
DE can find wipekey in raw scan, I believe.

Re: Apple Filevault issue

Posted: 18.10.23, 01:17
by Continuum
That is what I thought, but I cannot find it in my raw reference book. Any idea what it is called?

Re: Apple Filevault issue

Posted: 18.10.23, 01:50
by 300ddr
I'm sorry, but I don't have the information readily available.