File Vault 256-Bit FINALLY???

So is file-vault always 256 bit in leopard or is it an option that must be turned on? Also has anyone notice a decrease in performance since increasing from 128-bit to 256-bit?
Thanks
-intelpro20

First let me ask, does File-Vault use 256 bit encryption or 128?

Similar Messages

  • 128 bit AES on File Vault

    I am curious how good the encryption on file vault is? Is it similar to WPA where the length of the password determines its strength or vulnerability? Is it something like the FBI or similar agency could break?

    Given enough time and money, any encryption can be broken by those that specialize in it. That's why government agencies are constantly changing their encryption keys.
    Taken from the Wikipedia article quoting an NSA report:
    "The design and strength of all key lengths of the AES algorithm (i.e., 128, 192 and 256) are sufficient to protect classified information up to the SECRET level. TOP SECRET information will require use of either the 192 or 256 key lengths. The implementation of AES in products intended to protect national security systems and/or information must be reviewed and certified by NSA prior to their acquisition and use."

  • File Vault Won't Decrypt - operation fails in final minutes

    I'm trying to turn off file vault. File vault said I didn't have enough room on my hard drive so I followed Apple's instructions to go into safe mode, make a sparse disk image on an ext drive and then drag and drop the encrypted home folder into the disk image. At the last moment I get an error code -50 which says the operation couldn't be completed b/c of an unexpected error. I've retried this on other ext. drives, USB2 and FW just to eliminate some variables. They all failed in a similar manner
    Next I cloned the entire HD to the ext. Then I booted from the ext and tried to turn off file vault that way. The clone went fine, and I went through the steps to turn off file vault. File vault started to unencrypt then with about 10 min until finished I get the same -50 error.
    Is there anything left to do here? Is there some file that is tripping the process up?

    Try these:
    http://discussions.apple.com/thread.jspa?messageID=1872713
    http://docs.info.apple.com/article.html?artnum=25773
    http://docs.info.apple.com/article.html?artnum=301416
    http://docs.info.apple.com/article.html?artnum=303617
    http://docs.info.apple.com/article.html?artnum=305454
    http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh1908.html
    http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh1877.html
    http://discussions.apple.com/thread.jspa?threadID=1166826&tstart=0
    http://www.macosxhints.com/article.php?story=20050326041757989

  • File Vault and Firewall?

    I have a new macbook pro. Should I turn on File Vault and Firewall?

    The purpose of FileVault is to protect your files from being read by someone who has physical access to the computer. If you need or want that protection, you should enable it.
    The application firewall blocks incoming network traffic, regardless of origin, on a per-application basis. Typically, it would be configured to allow only applications digitally signed by Apple to listen on the network. It does not block outgoing traffic, nor can it distinguish between different sources of incoming traffic. It is not, as some people seem to believe, a malware filter.
    So for example, suppose you enable file sharing, and allow access by guests to certain folders. You want people on your local network to be able to access those files without having to enter a password. When configured as stated above, the firewall will allow that. Your router will prevent outsiders from accessing the files, whether the application firewall is on or not. But if your computer is portable and you connect it to an untrusted network such as a public hotspot, the firewall will still allow access to anyone, which is not what you want.
    Now suppose you unknowingly install a trojan that steals your data and uploads it to a remote server. The firewall, no matter how it's configured, will not block that outgoing traffic. It does nothing to protect you from that threat.
    Another scenario: Your web browser is compromised by a trojan. The trojan redirects all your web traffic to a bogus server. The firewall does nothing to protect you from this threat.
    A final scenario: You're running a public web server. Your router forwards TCP connection requests on port 80 to your Mac, and the connections are accepted by the built-in web server, which is signed by Apple. The application firewall, still configured as above, allows this to happen. Now you download a different trojan, one that tries to hijack port 80 and replace the built-in web server. The good news here is that the firewall does protect you; it blocks incoming connections to the trojan and alerts you. The bad news is that you've been rooted. The attacker who can do all this can just as easily disable the firewall, in which case it doesn't protect you after all.
    It might make a bit of sense to use the firewall if you're running trusted services on an unprivileged port; that is, a port numbered higher than 1023. Those ports can be bound by a process with no special privileges.
    Here is a more realistic scenario in which you should enable the firewall. Your portable Mac has several sharing services enabled. You want those services to be available to others on a home or office network. When you're on those networks, the firewall should be off. When you move to an untrusted network, you can either turn off all the services, or enable the firewall to block them. Blocking is easier: one configuration change instead of several.

  • Leopard File Vault lockout

    So last night I decide to restart my mini like any other night and have done several times since installing Leopard. But this time- Once I return to the log in screen and enter my password (which is the main admin account as well) and a stall of 15 seconds, I get a message reading : "Your FileVault-protected home folder did not open and needs to be repaired. Click OK to repair the folder and continue logging in." Once I click 'OK,' there is another stall for around 55 seconds before another message appears : "You are unable to log in to the user account "John" at this time. Logging in to this account failed because an error occurred." I have not been able to log into that user since and must log in to one of the standard users another family member uses.
    Any ideas? I've done the "control-s" reset password procedure.
    Message was edited by: John Wex

    It's not that simple. What happened is very human and very natural especially when you are a MAC fanatic - like me - and have been it for years. Let me explain. 6 years ago you create a MASTER PASSWORD - you use File Vault automatically to encrypt your data whenever you close down the computer (log out). You create another password (naturally) to log in every time you open your computer - Everything works perfectly for 6 years through many "wild animal" upgrades. As a fanatic MAC user I was one of the first that bought the Leopard upgrade. Waited in line for many hours outside the Apple Store in Tokyo Japan. I am not Japanese but live in Japan. This is anyway not the issue - Leopard is universal - all languages incl Jaoanese can be instralled - you choose 0 I have U.S. keyboard. When you finally get the much anticipated software, you rush home to be the first in the world (almost) to install it. Due to the time zone only New zealand is a couple of hours earlier. U.S. is the last to get it. You install Leopard and restart, your computer and you use your usual login password to log in which you have used for 6 years. What happened?? NOTHING. The desktop shake just like when you use a wrong password by mistake - anybody has tried that. You try again and again and again - but can't log in. Frankly you get a bit desperate. You can't read any support articles from Apple on the internet because you can't use your computer as you are still on the log in window. The computer is locked and I mean LOCKED. More secure that Pentagon. You use utilities on the installer disk to verify the disks - nothing is wrong with the installer disk nor the hard disk. You reinstall the software and try to log in again - but still can't log in. Then you get really annoyed. You use the utilities to change the password both master password and log in pass word. One at a time. Nothing works. You conclude that it must be the password (obviously), but you are 110% sure that you use the right password. The same as you have used for 6 years. You know that it works. You also conclude that Apple surely will not issue a major upgrade that automatically invalidates your password. That was actually where I was wrong but you have no idea about that yet. Who cares whether your password is 8 digits long? So finally I conclude that it must be a dream or I may have gone crazy. So I decide to go to sleep and hope that when I wake up everything will be OK, again I am convinced that I am must be doing something wrong. Must be me - cannot possibly be Apple that has goofed in it !!? You wake up in the morning and try again - and realize to your horror that IT WAS NOT A DREAM. You decide to go to the Apple Store and ask them to help you - I am talking about the Genius Desk. That was the very next day after the release. The genius (several) did not know abt the problem, but he did manage to log in to Root so there you can see the sparse home folder (encrypted though) plus the Document Folder and applications and other folders that are not encrypted - the desktop folder is encrypted together with all you emails and all other FILES. They told me to copy the sparse file (even encrypted) and the Document Folder, to a separate disk (just in case) and use the master password to try to log in - I did that while he looked at it. Had the portable disk ready -Still could not log in, and even the genius gave up. Even using the original master password did not work. The genius promised to call me if he got any info from Apple - as it was all new. Never called. I thought maybe I had screwed up the keychain or something else after reinstalling and changing passwords back and forth etc. After several days I managed however somehow to decrypt the encrypted home folder. I just double clicked directly on the encrypted sparse home file and even though there was a warning that said that if you did that I might damage the file or something horrable - since I had a copy I said what the heck and did it anyway. Believe it or not I got all data decrypted in a few seconds. Copied the decrypted files and restarted the computer but still could not log in with any password new or old. Since I had now most of the data files,I decided to initialize the hard disk and reinstall Leopard clean and then try to transfer the files from the decrypted Home folder (ex the portable storage device). It is not an easy job and the computer will never be the same. All the hundreds of 3rd party applications are lost. You can't just copy the application folder and hope it work - it doesn't You just have the DATA files. I am still trying to restore the computer to the originate state, which I realize is not impossible. It will never be the same even though I have the data files )some 150 GB of data The point is that had the original 8 digit password worked (don't tell me that this is not an oversight by Apple), I could have saved all this time and headache. Some people may have forgotten their Master Password after 6 years and they will surely loose all data. There is a very good chance that when you create one Master Password you may never ever have to to use it again, i.e. unless Apple make software that requires you to use it. In such case I would suggest to Apple that they put a red WARNING sticker on the case - but then again who dare to buy software with big red warning sticker on it. that says you you will need your master password (not log in password to use the Software) Most people will wonder what is a Master password - Don';t recall I have any and So they decide not to buy the upgrade. Apple decided to keep quiet and just sacrifice people like me. That was the cheapest solution.
    I am very curious though to find out whether Apple actually knew that an 8 digit password created with the first OSX Operating system could not be used for Leopard. What is wrong with 8 or more digits??? why not 7 digits ? - this is a mystery to me. Apple has never explained why. Do you happen to know?? You will surely agree that this is a major major glitch - Try to Imagine that you cannot use your password to log in first time after you have installed the new Operating system.
    Quite unbelievable. I would dare to bet that Microsoft has never had a similar problem. Tell me if I am wrong.
    By the way are you working for Apple? You seem to defend them by the teeth. If you had gone through what I have then you wouldn't.

  • Time Machine and File Vault problems

    Hi,
    Since I converted to Mac more than a year ago, I turned my file vault on (although I learned in the meantime that it is not actually necessary....)
    I now recently bought the time Capsule and found out that the Time Machine doesn't go well with the File Vault turned on. It does back up the home folder only when logged out and I don't get the hourly backups for single files either.
    I then tried to turn File Vault off, but get the error message that I haven't got enough space on my hard disk (which I have). This message led me to this article here: http://support.apple.com/kb/TS1974
    I am really not an expert and not too confident to play around with accounts, backups and so on, so I really don't want to go down the described route.
    For me, it looks like a bug in OS X, I should be able to turn File Vault off with the click of a button. Also, why is the File Vault / Time Machine conflict nowhere mentioned ? I was playing round with TM to recover a single file, but this wasn't possible, that's why I went to explore the issue further...
    I now just want to turn off File Vault and finally want to use my TC normally.
    Who can help ?
    Message was edited by: Mike201071

    ....so, it seems to work now.
    I did eventually go through the routine of backing up my home folder manually on the TC, then I created a new account, copied everything back, deleted the old account, and so on, as described in the link above.
    I did not turn on the File Vault, activated TM and backed the whole lot up via Ethernet, switched back to wireless and TM seems to do the trick now.
    I have now access to single folders and files when I go back in time in TM, instead of the whole backup only.
    This seems to be the only way TM & TC are working properly, why is this conflict between File Vault and TM nowhere mentioned ?

  • File Vault - Hard Drive Crash

    All,
    My HD crashed, and "Disk Utility" was unable to repair it. Apple store geniuses told me to get a 3rd party restore utility, like Data Rescue II. Did so, and recovered my data. But my whole home directory is one large (36 GB) file, which is my file vault.
    I have "harvested" that all I can off of the bad drive to a good mac HD. I think my next step is to format and reinstall 10.3.9 on to the broken machine. But before I do that, I'd like advice about recovering the File Vault.
    How do I open that File Vault to get back to all my important data? I of course still have my password for the vault. Thanks for suggestions.
    I'm using 10.3.9.
    G5 Dual 1.8 GHz   Mac OS X (10.3.9)  

    Thanks Niel,
    Does anyone know if a partially-corrupted sparseimage can be opened, or must it be 100% in-tact?
    I used Data Rescue II to pull data off the drive. Looks like much of it was recovered successfully, but my sparesimage filevault file is strange. I believe it to be multiple gigs in size based on the digital photos and movies I have in my home directory. The recovered sparseimage is only 22 MB. Data Rescue says it is 36 GB on the scan. 36 GB sounds a bit high, and 22 MB is a bit low. I am re-running with a through scan, and perhaps that can recover the sparseimage in full.
    I attempted both Niel's suggestion, and also another suggestion to use Terminal and the unix utility "hdiutil". Niel's method locked the good mac as it tried to open the sparseimage, and the hdiutil simply failed after repeated attempts.
    I wish I did not use FileVault to store all of my pictures and videos. It would be more appropriate for storage of only my accounting and personal information. Even better - wish I would have backed up much more frequently.
    G5 Dual 1.8 GHz Mac OS X (10.3.9)

  • Need 256 Bit AES Full Disk Encryption for a Mac.  The other discussions regarding this issue are very old.  Does anyone have any current advice regarding encryption software?

    Does anyone have any advice regarding 256 bit full disk encryption software for Macs?  The other discussions on the topic are years old, so I would like some current input.  Thanks for your help in advance.

    Depending on your Mac, you might not want to upgrade to OS X 10.7 or 10.8 as it will not run the PowerPC based software your currently using costing a bundle to replace it all, also they will slow down your machine if it's not a more recent issue. You don't want to upgrade OS X without AppleCare defending your possibly bricked logicboard that's for sure.
    Filevault encrypts the boot drive, however in doing so makes it near impossible to fix if you have a software issue and need to recover files directly or by using specialty software. Also it robs the machine of performance even more than the Lions do. So you will really need a SSD to work best with 10.7/10.8 and Filevault, then it has to be freshly installed. Filevault needs 50% free space on the boot drive, then it's going to write to the slower 50% half of the hard drive where performance is terrible compared to the first 50%.
    Also Filevault is cracked under certain conditions, and if someone gets their hands on the machine (like the law) and knows what they are doing.
    If you take your Filevaulted machine to Apple to fix, they are going to require the password to fix the machine obviously.
    Software based encryption is vulnerable, you might want to instead place your sensitive data on external self-encrypting hardware that doesn't rely upon software or computer hacks/bypasses (ike freezing the RAM) to get to it.
    http://www.datalocker.com/products/datalocker-dl3.html
    Iron Keys for portable USB self encryption, both work with any computer, so your not locked into one platform.
    With the senstive data off the computer and on a external device, there is the option of removing, hiding and securing the device. If used with a computer that's never connected to the Internet, it's safe from snoopers, except from a survelliance van parked outside your door.

  • Imac/imovie/Lacie-file vault seems to be deleted. Am I screwed?

    Hello all,
        I was editing a movie in iMac, but when I went to finalize the project, it told me I didn't have enough memory. I checked and re-checked and I could not find what was using it up. My movie/photos etc totaled a litte over 100 gigs out of 1 TB. I downloaded a couple of programs to see what was taking up the space but finally found out that 719 gigs was being used by a huge file called "bands." I deleted the file and now when I try to log in I am told that file vault cannot log me in at this time. I have been trying for two days to log in. I was connected to Lacie 6TB but upon disconnecting the size of the file did not decrease.
    Am I screwed? Are there any solutions? Apple refuses to even acknowledge my mail, so I assume this is a problem they don't want to hear about. Any help would be greatly appreciated.
    Matthew D. Heines
    www.heinessight.com

    Thak you.
    I am running Mountain Lion and I have a 3.4 GHz intel Core i7
    That means your model is "27-in Mid-2011 iMac." If you add that to your profile and select OS 10.8, you should get faster help because people don't have to ask you a question before they can answer.
    I'm asking the Hosts to move you into the forum for current iMacs. The one you found is for pre-2006 iMacs and gets less traffic. Not your fault--the labeling here is bad and confusing
    You may also want to review the MAc OS 10.8 forums here:
    OS X Mountain Lion
    to see if missing space is happening to others.

  • File vault won't enable

    I inadvertantly turn off file vault in Security & Privacy preferences. I want to turn it back on. I clicked on the Turn On FileVault and got a message to restart. I did that multiple times, an endless loop. What to do?

    Thank you Thomas, that hit the nail right on the head and your solution serves wonderfully - even more-so as one can have multiple secured file systems if required, although only the one will server me fine.
    Kappy, this is my situation: I have used Macs for eons and upgraded bit by bit from one machine to another over the years. I currently use a MBP 17" for my main work and travel machine, at home I have an iMac 24" with bootcamp and a Mini on the Home Theater. Both the MBP and iMac run Parallels and have the mandatory Office basics on them. The iMac is the version with the Nvidea 9000 something or other card and in Bootcamp, running XP, it can handle pretty much any PC game that can be thrown at it. This is required with youngsters in one's house - and, well, can't say I don't enjoy a romp around some of these virtual worlds meself.
    I synchronize these two using Synchronize X Pro.
    At work I need to handle documents that need to be secured. However I have all my photos and audio library on both these machines as well as a NAS at home. I have tons of personal and family files. I do not want to simply encrypt my home directory, it would take an age and is counter-productive. But I DO want a location where I can store documents securely. The "sparseimage" file that Disk Utility allows me to create fits the bill perfectly. By NOT storing the password in the keychain, anyone attempting to mount the sparseimage file - even assuming they knew what it was - would be stymied by my cunningly complex and confusing password. And this assumes that they get by my equally complex login password or gain access to my HD using some sneaky side-entry.
    So in the horrendous event I lose my MBP, I can feel fairly comfortable that my work files are safe.
    Thanks for your help.
    Lawrence

  • File Vault won't stop.  Makes loud noise

    When I set up my IMAC G-5 originally, I selected to us File Vault, since I didn't know any better. I haven't opted to have space recaptured for a long time. Last night when asked, I said yes. After an hour of seeing the small circle turning on the light blue screen, the scren went black and a loud noise began, possibly the hard drive turning at full speed without doing anything. That was over 11 hours ago, and now I don't know what to do. I have all id's and passwords, but haven't backed up recently, so I don't want to turn off the machine unless that is the only option. My email address is [email protected] if you respond by email. Thank you
    Message was edited by: Jack Goldberg

    I finally decided to turn off the machine anyway, and nothing was corrupted. I'll now backup the machine, turn off file vault, and recommend to my friends that it is risky to use.

  • Problem: securely erasing home folder after enabling file vault

    I enabled file vault. It took 4 days (125 GB) to "securely erase home folder", then when it finally reached 100% I got an error message that it could not be erased after all. I also now got an icon on the desktop (protected house) showing my home folder. Anybody experience with this? What do I do to securely erase? What can I do to speed it up? I have 4GB RAM and a HD of 500GB

    open /Applications/Utilities/Terminal.app
    At the prompt type:
    diskutil secureErase freespace 0 /
    (press return)
    This will secure erase free space on your boot volume.
    Level "0" (zero) is a Single-pass zero-fill erase. Levels 0 through 4 are supported.
    Here is a full description of the different erase levels: 0 - Single-pass zero-fill erase.
    A. 1 - Single-pass random-fill erase.
    B. 2 - US DoD 7-pass secure erase.
    C. 3 - Gutmann algorithm 35-pass secure erase.
    D. 4 - US DoE algorithm 3-pass secure erase.
    for more info (in Terminal) type:
    man diskutil
    (press return)
    This should take considerably less time than 4 days. On my Mac Pro with 162GB boot volume,
    130GB free (I keep my data on a different volume) it takes about 10 minutes using level "0".
    Disk Free Space Warnings are normal during operation and can be ignored.
    more info about it from apple support:
    http://support.apple.com/kb/TA24002
    You can invoke the erase procedure from Disk Utility GUI interface, but it usually is quicker
    when run from terminal.
    Kj ♘

  • Mail Attachment after File Vault Turned on.

    I turned on File Vault in my iMac and it took nearly 9 - 10 hrs to completely encrypt.  Today, when I sent mail attachments in jpeg format, (only images of scanned copies) my friends couldnt open it.  I resent it a few times and finally I had to send it in PDF.  Before turning on the File Vault, this has not happened.  I dont understand this.  If it is due to File Vault, then, should I convert all the images to PDF before attaching with mail?  Members, please explain me the system and help me.  Thanks. 

    It should be shareable as long as you are logged in. If you want it shareable at other times, put the iTunes library (and any audio files that are not in the library) outside your home folder. Itunes Help has instructions on moving the library. Set the permissions so others can read the library. If the other user holds Option when starting iTunes there will be an option to choose the library.

  • What is File Vault?

    HI! when i first got my ibook i saw that file vault protected my files and decided i should use it...Now, im not sure how filevault really operates or how it protects me and my files. Im the only user on my laptop and im a student. So... should i even have filevault enabled at all? Basically i just want to know how filevault works and if i need it on or not. Thanks in Advance!
    -Seth

    Be aware that FileVault, even though it runs transparently, does eat up extra CPU cycles, and does slow down your computer to a degree. It is up to the individual to determine if they require that much security.
    From the Help files:
    Mac OS X includes FileVault, which allows you to encrypt the information in your home folder. FileVault creates a separate volume for your home folder and encrypts the contents of it. The data in your home folder is encoded and your information is secure if your computer is lost or stolen. FileVault uses the latest government-approved encryption standard, the Advanced Encryption Standard with 128-bit keys (AES-128).
    When you turn on FileVault, you also set up a master password for the computer that you or an administrator can use if you forget your regular login password.
    WARNING: If you turn on FileVault and then forget both your login password and your master password, you will not be able to log in to your account and your data will be lost forever.
    If the information on your computer is of a sensitive nature, you should consider using FileVault. For example, if you carry all your company's financial data on your PowerBook, losing your PowerBook could allow someone else access to sensitive data that might hurt your business. If you are logged out of your account when your PowerBook is lost, and FileVault is turned on, your information is safe.
    Since you home folder is encrypted, some tasks that normally access your home folder may be prevented, for example: backup utilities may see your home folder as one folder that's always changing, and this could slow down your backup. Also, if you're not logged in to your computer, other users will not have access to shared folders in your home folder

  • After Time Machine backs up my file vault files (after logging out), when I next log into the user account it beachballs permanently during log in.

    After Time Machine backs up my file vault files (after logging out), when I next log into the user account it beachballs permanently during log in.  The backup was successful, as I had to restore after this issue last time.  Hard resetting doesn't resolve the issue.  Is there a Time Machine setting that I should be aware of?
    I have 2011 13" MBP, 10.6.8 and use an external hard drive connected via USB for my Time Machine backups.
    Thanks

    I was able to get it to work.  Thanks for your help.  It's unfortunate the two applications do not work well together.  This is what I did:
    1) Safe boot and logged into the affected user (since the whole issue damaged the account's system settings).
    2) Turned off File Vault in System Preferences. I needed to make some space on the hard drive first since apparently the total free space on the hard drive has to equal or exceed the amount of data currently in the file vault.  I deleted some files and moved others to the Admin account.  This whole process took awhile.
    3) Finally, just restarted and logged in.  The next time machine backup seems to be a significant backup, I assume because it's backing up the user account in a different way now that File Vault is turned off.
    Thanks again!

Maybe you are looking for