FileVault in Leopard

Discussion in 'macOS' started by jaredbkt, Oct 20, 2007.

  1. jaredbkt macrumors newbie

    Joined:
    Apr 5, 2002
    #1
    Does anyone know if FileVault in Leopard will still be 128-bit encryption level or has it been increased to do 256-bit encryption?

    Any help on this topic is appreciated!
     
  2. projectle macrumors 6502

    Joined:
    Oct 11, 2005
    #2
    Advanced Encryption Standard with 128-bit keys (AES-128)
     
  3. jaredbkt thread starter macrumors newbie

    Joined:
    Apr 5, 2002
    #3
    That's a shame. I don't know why they've kept the lower level and not moved forward to 256-bit.

    I was hoping there would FINALLY be a 256-bit whole disk encryption option for the Mac. Guess not.
     
  4. unity macrumors 6502a

    Joined:
    Sep 30, 2005
    Location:
    Green Bay, WI
  5. jaredbkt thread starter macrumors newbie

    Joined:
    Apr 5, 2002
    #5
    Company mandate, no exceptions. 256-bit whole disk encryption.
     
  6. Benjamin macrumors 6502a

    Benjamin

    Joined:
    Oct 27, 2003
    Location:
    Portland, OR
    #6
  7. jaredbkt thread starter macrumors newbie

    Joined:
    Apr 5, 2002
    #7
    I appreciate the link but I've already looked into that option. Sadly, it does not work on boot volumes, thus it doesn't satisfy my needs.

    I contacted the PGP company and they said they have no plans to implement a boot disk encryption feature for their mac products.
     
  8. Analog Kid macrumors 601

    Analog Kid

    Joined:
    Mar 4, 2003
    #8
    I thought I did see that Leopard was allowing 256bit encryption for disk images, though. They're not going to support that for FileVault?
     
  9. Benjamin macrumors 6502a

    Benjamin

    Joined:
    Oct 27, 2003
    Location:
    Portland, OR
    #9
    Yeah under DYI encrypting it does day that Disk Utility does 256-bit AES.
    http://www.apple.com/macosx/technology/security.html
     
  10. Danksi macrumors 68000

    Danksi

    Joined:
    Oct 3, 2005
    Location:
    Nelson, BC. Canada
    #10
    That's a pretty high mandate. What area does you company work in?

    We're financial, so highest possible encryption, where possible.

    We're using PGP Whole disk on all laptops, but then again, we're a 100% Windows shop.
     
  11. ibell63 macrumors newbie

    Joined:
    Jun 5, 2007
    #11
    I can understand everyone's concerns here regarding how brute forcing is becoming more and more easy as processors get faster and faster, but apple really has worse problems with file vault to work out, to begin with, the headers of the blocks in the sparse images used are encrypted with 1024 bit RSA encryption! This is about equivalent to 72 bit AES, this needs to be fixed as important information regarding the key and algorithm are stored in the header. I agree with everyone here that wants a more secure file vault, but upgrading to 256 Bit AES alone for the data encryption is like getting all steel doors and frames for your house, but at the same time leaving a window open.

    The NSA did a study on the security of File Vault in Mac OS 10.4 and had many criticisms that had nothing to do with the 128 bit key length.
     
  12. jaredbkt thread starter macrumors newbie

    Joined:
    Apr 5, 2002
    #12
    I really do appreciate everyone's comments on this matter. However, what seems to continue to slip through the cracks is that this issue has zero to do with what the NSA thinks, reviewers, or personal opinion.

    My company MANDATES that the encryption be 256-bit NO EXCEPTIONS. Nothing else matters besides that fact and since FileVault CAN NOT encrypt in 256-bits it is an unusable solution for me.
     

Share This Page