> How does one prove, beyond a reasonable doubt, that I haven't actually forgotten the password? It appears the disk wasn't fully encrypted (since they found h

> How does one prove, beyond a reasonable doubt, that I haven't actually forgotten the password? It appears the disk wasn't fully encrypted (since they found hashes of individual files), so they likely know when the computer was last used and possibly when the data in question was last decrypted. I don't think the former being very recent should be enough to establish that he hasn't forgotten the password, but the latter sure seems like a good standard.