FileVault2 with extracted keybag from Apple T2 chip
#4
Hello,

no worries and thanks for your answer.

However, I understood from your first message that you successfully extracted the systembag.kb and also the corresponding iv and key from Effaceable Storage to decrypt the key bag.

Unfortunately, I am not able yet to extract the IV and KEY from the Effaceable Storage.
Did you extract them with get_bag1 from https://github.com/russtone/systembag.kb ? I tried it but I always get a "Killed: 9" error message.

I would just need help for this step now.

Thanks in advance and best regards.
Reply


Messages In This Thread
RE: FileVault2 with extracted keybag from Apple T2 chip - by gostep - 02-26-2021, 12:26 PM