From owner-freebsd-hackers@freebsd.org Tue Sep 8 18:51:56 2015 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A894FA00CB5 for ; Tue, 8 Sep 2015 18:51:56 +0000 (UTC) (envelope-from mozolevsky@gmail.com) Received: from mail-ig0-x230.google.com (mail-ig0-x230.google.com [IPv6:2607:f8b0:4001:c05::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 720DD135B for ; Tue, 8 Sep 2015 18:51:56 +0000 (UTC) (envelope-from mozolevsky@gmail.com) Received: by igbkq10 with SMTP id kq10so86446674igb.0 for ; Tue, 08 Sep 2015 11:51:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=MH7SHWkI3S6/GKy+hXDD2McrKJpenzgXfY0Q/VUbDMs=; b=zPmSCyzt+lRqrO6wiAIBo5DLvxF415USbv7RpiG9rC8TpSJK613BgiJHr5XGB6kR4U 2WicJzioQAjn11SnDVwEriWzjQUZnvRfnEXjGvdDo3gIRFMxqMnFbPMJlCxfSsiekguT AxMUVFkT3wjAKI0QnJKrVK3VJCDevhswO6tFtcIQRS21Dvch4HMQ3wShwFuVO2KKXJwn qtNfOlDt16hiVhJHFg1eW9ydRYtPTMFbghJExj5w1f9M3w8arlEaCgDzsQ3L6Rs+5LyD a4wKqFohY6zlgyl0QBm0PQHy5tJDzZ60mwg3Lu/xrflPWYZi/dLtMD1g28eAukbQFov3 hWTg== X-Received: by 10.50.78.6 with SMTP id x6mr4629677igw.27.1441738315895; Tue, 08 Sep 2015 11:51:55 -0700 (PDT) MIME-Version: 1.0 Sender: mozolevsky@gmail.com Received: by 10.79.92.198 with HTTP; Tue, 8 Sep 2015 11:51:16 -0700 (PDT) In-Reply-To: References: <8B7FEE2E-500E-49CF-AC5E-A2FA3054B152@gmail.com> From: Igor Mozolevsky Date: Tue, 8 Sep 2015 19:51:16 +0100 X-Google-Sender-Auth: 1FNnImWIDakjyxq5KkuxX9HhLCg Message-ID: Subject: Re: Passphraseless Disk Encryption Options? To: "Li, Xiao" Cc: Hackers freeBSD , Analysiser Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Sep 2015 18:51:56 -0000 On 8 September 2015 at 19:35, Li, Xiao wrote: > Agreed, that=C2=B9s why I=C2=B9m stuck in here: it seems like something e= ither > unachievable or haven=C2=B9t been done before. I mentioned Apple=C2=B9s m= ethod is > only because it is something similar in that both requires a full disk > encryption on startup disk. But Apple=C2=B9s way is like to decrypt the d= isk on > login; I=C2=B9m trying to decrypt the disk during prelogin after the boot= . > I think you're missing the point- I suspect Apple's login *is* the decrypt process- OS X needs something from the user to give access to the data; without the user typing in their password, the data on the disk (as I said) is just a source of entropy. --=20 Igor M.