libyal / libfvde

Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes
GNU Lesser General Public License v3.0
339 stars 34 forks source link

fvdeinfo: Unable to unlock keys #28

Closed zappoi closed 2 years ago

zappoi commented 6 years ago

Hello, with fvdeinfo 20170917 it's impossible to mount / have infos on Filevaulted devices: it's says Unable to unlock keys.

What diskutil shows:

~/Desktop/libfvde(master*) » sudo diskutil list                                                                   
/dev/disk0 (internal):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      GUID_partition_scheme                         500.3 GB   disk0
   1:                        EFI EFI                     314.6 MB   disk0s1
   2:          Apple_CoreStorage Macintosh HD            499.3 GB   disk0s2
   3:                 Apple_Boot Recovery HD             650.0 MB   disk0s3

/dev/disk1 (internal, virtual):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:                  Apple_HFS Macintosh HD           +499.0 GB   disk1
                                 Logical Volume on disk0s2
                                 9FEA6F1C-6745-481D-88D4-440BF17FFD4C
                                 Unlocked Encrypted

/dev/disk2 (external, physical):
   #:                       TYPE NAME                    SIZE       IDENTIFIER
   0:      GUID_partition_scheme                        *32.2 GB    disk2
   1:                        EFI EFI                     209.7 MB   disk2s1
   2:          Apple_CoreStorage Sans titre              31.9 GB    disk2s2
   3:                 Apple_Boot Boot OS X               134.2 MB   disk2s3

Offline
                                 Logical Volume Sans titre on disk2s2
                                 4A429E5D-2A2A-46FA-BC5B-91A106284811
                                 Locked Encrypted
------------------------------------------------------------

And I don't what I'm doing wrong but although I compiled libfvde with debug output it shows nothings

Features:
   Multi-threading support:                   pthread
   Wide character type support:               no
   fvdetools are build as static executables: no
   Python (pyfvde) support:                   no
   Python version 2 (pyfvde) support:         no
   Python version 3 (pyfvde) support:         3.6
   Verbose output:                            yes
   Debug output:                              yes

-------------------------------------------------
sudo ./fvdetools/fvdeinfo -v /dev/disk2s2 -p password                                                            
fvdeinfo 20170917

Unable to unlock keys.

Do you have an idea of what I'm doing wrong ? Thanks!

zappoi commented 6 years ago

I compile an older version (fvdeinfo 20170527) and the debug output worked output file log

joachimmetz commented 6 years ago

libfvde does not seem to find the correct offset of the encrypted volume. I'll have a look when time permits

joachimmetz commented 2 years ago

Closing in favor of https://github.com/libyal/libfvde/issues/2