3 ms·
> Do they encrypt known CP files with the FileVault key and then compare? This shouldn't work because if they had the key (which should be encrypted with the p
by infinisil 9y ago
> Do they encrypt known CP files with the FileVault key and then compare?
This shouldn't work because if they had the key (which should be encrypted with the password) then they could also just decrypt the rest.
Somebody on IRC said that maybe the encrypted filesystem saves hashes of the files unencrypted, but not sure if Apple's FileVault does this.
- Pywarrior 9y agoStoring hashes of unencrypted files, would that allow FileVault to verify it was decrypted without error?
- poizan42 9y agoThe correct order is hash then encrypt, exactly so you can't do that. Now I don't know if FileVault is doing this correctly, but hopefully it does. Edit: So two people have downvoted me without explanation. Is what I'm saying wrong?
- maaaats 9y agoYou can't unhash, so you could never retrieve the original file again.
- mdekkers 9y agotwo people have downvoted me without explanation Sadly, that is the new normal for HN (and, I'll be downvoted for saying something like this)
- slaymaker1907 9y agoYou could also hash, encrypt, then hash again if you wanted extra integrity without decrypting. This is technically done with HTTPS through the TCP hash.