libyal / libfvde

Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes
GNU Lesser General Public License v3.0
339 stars 34 forks source link

libfvde_encryption_context_plist_get_passphrase_wrapped_kek: invalid plist - missing XML plist crypto users key #21

Closed ramonskie closed 2 years ago

ramonskie commented 7 years ago

i try to mount my macbook disk but i only have the password and not the recoverykey and as i read it you can access it only with the password right?

i tried

➜  ~ sudo fvdemount -e EncryptedRoot.plist.wipekey -p mypassword /dev/sda2 /media/mntpoint1 
fvdemount 20160918

Unable to open: /dev/sda2.
libfvde_encryption_context_plist_get_passphrase_wrapped_kek: invalid plist - missing XML plist crypto users key.
libfvde_encrypted_metadata_get_volume_master_key: unable to retrieve passphrase wrapped KEK: 0 from encryption context plist.
libfvde_volume_open_read_keys_from_encrypted_metadata: unable to retrieve volume master key from encrypted metadata.
libfvde_volume_open_read: unable to read keys from primary encrypted metadata.
libfvde_volume_open_file_io_handle: unable to read from file IO handle.
mount_handle_open_input: unable to open input volume.

any suggestions?

joachimmetz commented 2 years ago

Looks like the library is unable to find the crypto users key it requires.

libfvde_encryption_context_plist_get_passphrase_wrapped_kek: invalid plist - missing XML plist crypto users key.

Unable to resolve without debug output, reopen when more information available.