Difference between pages "File Vault" and "Tcpdpriv"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
m (New page: {{Infobox_Software | name = tcpdpriv | maintainer = Greg Minshall | os = {{Linux}} | genre = {{Anonymization}} | license = {{BSD}} | website = http://ita.ee.lbl.gov/html/co...)
 
Line 1: Line 1:
−
FileVault (or File Vault) is the cryptographic file system developed by [http://www.apple.com Apple] and introduced with MacOS 10.3.
+
{{Infobox_Software |
 +
  name = tcpdpriv |
 +
  maintainer = [[Greg Minshall]] |
 +
  os = {{Linux}} |
 +
  genre = {{Anonymization}} |
 +
  license = {{BSD}} |
 +
  website = http://ita.ee.lbl.gov/html/contrib/tcpdpriv.html |
 +
}}
  
−
FileVault works by storing each user's home directory in an encrypted "[[.sparseimage]]" file. The file is automatically mounted when the user logs in and unmounted when the user logs out. All of the user's files and preferences are stored in this file.  The file's encryption key is stored in the .sparseimage file, but that encryption key is itself encrypted with the user's login password.
+
tcpdpriv is an anonymization tool that removes ''private information'' from a tcpdump file.
−
 
+
−
There are no known attacks against File Vault other than a brute force attack on the user's password.
+
−
 
+
−
As part of the [http://www.apple.com/macosx/features/300.html#security security enhancements] in OS X 10.5 (Leopard) Apple have moved from AES-128 to AES-256 for the encryption used in the disk image.
+
−
 
+
−
In Mac OS X 10.7 (Lion) a full volume encryption variant was introduced.
+
−
 
+
−
== See Also ==
+
−
* [[FileVault Disk Encryption]]
+
−
 
+
−
=== Links ===
+
−
*You can find a good discussion of File Vault's usability shortcomings in [http://www.simson.net/thesis Simson Garfinkel's PhD Thesis].
+
−
*[http://chaosradio.ccc.de/23c3_m4v_1642.html Unlocking FileVault] Talk at [http://events.ccc.de/congress/2006-static/static/2/3/r/23rd_Chaos_Communication_Congress_7c1f.html 23c3] (video)
+
−
*[http://chaosradio.ccc.de/23c3_mp3_1642.html Unlocking FileVault] Talk at [http://events.ccc.de/congress/2006-static/static/2/3/r/23rd_Chaos_Communication_Congress_7c1f.html 23c3] (audio)
+
−
*[http://crypto.nsa.org/vilefault/23C3-VileFault.pdf Unlocking FileVault Whitepaper]
+
−
 
+
−
[[Category:Encryption]]
+
−
[[Category:Disk encryption]]
+

Revision as of 07:11, 11 June 2007

tcpdpriv
Maintainer: Greg Minshall
OS: Linux
Genre: Anonymization
License: BSD
Website: http://ita.ee.lbl.gov/html/contrib/tcpdpriv.html

tcpdpriv is an anonymization tool that removes private information from a tcpdump file.

Retrieved from "http://www.forensicswiki.org/w/index.php?title=File_Vault&oldid=7164"
Personal tools
Namespaces

Variants
Actions
Navigation:
About forensicswiki.org:
Toolbox