8 ms·
I'm not sure.. I think this article is about something slightly different: if I _disable_ storing my FileVault 2 recovery key with Apple, _then_ upgrade to Moun
by nodata 14y ago
I'm not sure.. I think this article is about something slightly different: if I _disable_ storing my FileVault 2 recovery key with Apple, _then_ upgrade to Mountain Lion, is either of the following true?
1. Apple nabs a copy of my FileVault 2 recovery key
2. Apple can reset my FileVault 2 passphrase
The article doesn't make it clear, and doesn't seem to test either.
- dchest 14y agoI don't know details about the upgrade process, so I can't answer, but this is really one question, not two: given 1 they can do everything, including 2.
- nodata 14y agoNo it's not.
- dchest 14y agoYes, it is. Recovery key provides access to the encrypted volume in the same way as your password. There's no other way around: if something (password, recovery key, recovery certificate) can decrypt your volume, this something can also be used to change your password/recovery key/recovery certificate, which is not really important, because they already have access to decrypted volume. In the linked analysis, the authors "reduced" the security of FileVault 2 to the entropy of 120-bit recovery key.
- nodata 14y agoThe only time the recovery key matters is if Apple has taken it without permission. That doesn't seem to be the case. So we're talking about whether resetting an Apple ID will also reset a FileVault passphrase.