libfvde is a library to access FileVault Drive Encryption (FVDE) (or FileVault2) encrypted volumes.
The FVDE format is used by Mac OS X, as of Lion, to encrypt data on a storage media volume.
Supported FileVault2 implementations:
Supported encryption volume types:
Supported protection methods:
If you find this project useful please cite the following paper in your publications: Omar Choudary, Felix Grobert and Joachim Metz. "Security Analysis and Decryption of Filevault 2", in Advances in Digital Forensics IX, IFIP Advances in Information and Communication Technology 410, 2013, pp 349-363.
Work in progress:
For more information see: