baumi's blog

baumi's personal blog … Linux, OS X, Windows, Random things, …

GNU/Linux Elementary OS “Freya”: mounting a mac osx filevault 2 encrypted volume

****EL CAPITAN CURRENTLY NOT SUPPORTED****

https://github.com/libyal/libfvde/wiki/Mounting

apt-get install automake autopoint aclocal libtool
git clone https://github.com/libyal/libfvde.git
cd libfvde
./synclibs.sh
./autogen.sh
./configure
./make install
ldconfig

to get the wipekey:

apt-get install sleuthkit
mmls /dev/sda
# Note down the offset for "Recovery HD" and use that for the next command:
fls -r -o 1991877544 /dev/sda | grep -i EncryptedRoot
# then use the displayd number (in my case it was "2571") and exctract your wipekey:
icat -o 1991877544 /dev/sda 2571 > EncryptedRoot.plist.wipekey

Comments are currently closed.