4 ms·
One of the nice things about OSX and Filevault2 is that you can force the key to be destroyed on suspend: destroyfvkeyonstandby - Destroy File Vault Key w
by aroch 13y ago
One of the nice things about OSX and Filevault2 is that you can force the key to be destroyed on suspend:
destroyfvkeyonstandby - Destroy File Vault Key when going
to standby mode. By default File vault keys are retained
even when system goes to standby. If the keys are
destroyed, user will be prompted to enter the password
while coming out of standby mode.(value: 1 - Destroy, 0 -
Retain)
- anologwintermut 13y agoOne of the other nice things about OSX is the feds may already have your key[0], so if you manage to get your computer back from them after that confiscate it, it won't have cracks in it from the extreme cold. [0]http://www.nosuchcon.org/talks/D1_02_Alex_Ninjas_and_Harry_Potter.pdf http://www.nosuchcon.org/talks/D1_02_Alex_Ninjas_and_Harry_P...
- aroch 13y agoSMCs are present in nearly all Intel systems...They could very well store your truecrypt keys too
- anologwintermut 13y agoSMCs are not the problem. The problem is code in OSX could put your key there in a way that someone could dump it. Of course, since FileVault is not open source, we have no way of knowing if it does this. Is this paranoid? Perhaps, but if you are worried about cold boot attacks you should be worried about this as well. You might also be worried about some strange design decisions in FileVault such as the fact that it uses public key cryptography[0] for what ought to just be symmetric disk encryption. While not a red flag,it is a bit strange. [0]http://deimos3.apple.com/WebObjects/Core.woa/FeedEnclosure/utah.edu.1380568002.01381129957.14368733217/enclosure.pdf http://deimos3.apple.com/WebObjects/Core.woa/FeedEnclosure/u...
- ris 13y agoThe trust you have in proprietary software is charming.