Update FileVault Drive Encryption (FVDE).asciidoc

libyal / libfvde

Library and tools to access FileVault Drive Encryption (FVDE) encrypted volumes

GNU Lesser General Public License v3.0

339 stars 34 forks source link

Update FileVault Drive Encryption (FVDE).asciidoc #49

Closed vlad-krsk closed 2 years ago

vlad-krsk commented 3 years ago

Metadata writes by transactions. Each transaction changes part of metadata info. Small transaction starts with block 0x0013. Fragmented transaction could have 1st fragment started by block 0x0013 and 2nd fragment started with block 0x0014. All blocks of transaction have the same transaction number in header. The recent data is in the latest transactions.

joachimmetz commented 2 years ago

thx transaction might be a more suitable term for it, I'll incorporate similar changes in upcoming commits.