Ignoring missed passphrase wrapped kek instead of returning error

libyal / libfvde

Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes

GNU Lesser General Public License v3.0

341 stars 34 forks source link

Ignoring missed passphrase wrapped kek instead of returning error #43

Closed bulhakov-adf closed 3 years ago

bulhakov-adf commented 5 years ago

Hi @joachimmetz,

It looks that some "service" users from CryptoUsers don't have KeyWrappedKekStruct which doesn't seem to be an error. Here is decrypted wipeKey sample — EncryptedRoot.plist.wipekey_decrypted.zip

I wanted to add verbose output as well, but it seems like the whole partition is being dumped through stderr.

joachimmetz commented 5 years ago

Thx I'll have a look as soon as time permits.

joachimmetz commented 3 years ago

Instead of merging the proposed changed, I'll change libfvde_encryption_context_plist_get_passphrase_wrapped_kek to return 0 if there is no PassphraseWrappedKEKStruct