If you can’t get a Mac machine, VMware comes to the rescue. Sometimes having access to a Mac can be a pain as most lab setups are windows / linux. Method 2: Use another Mac (running at least OSX 10.6 Lion) The procedure is well documented at the libfvde wiki. This is the ideal approach as you only need to run one single command to do the decryption. You can extract the file using Encase or FTK imager easily. You will need to extract the file from the image’s Recovery partition and provide it to the tool on the command line along with the password / recovery key of the disk. The libfvde project is currently experimental but works just fine. Method 1: Use Joachim Metz’s libfvde project

FileVault2 uses a new scheme with 128 bit AES encryption of the entire volume.ĭecrypting the volume NOTE: To proceed you need to know the password or recovery key to the volume, this post is NOT about cracking the File Vault password.

Apple's Full Disk encryption (actually volume only) is also referred to as FileVault2, as the same name was used earlier by Apple to perform User Home folder encryption.

Harddive images for mac emulator