FileVault2 with extracted keybag from Apple T2 chip
#5
(02-26-2021, 12:26 PM)gostep Wrote: Hello,

no worries and thanks for your answer.

However, I understood from your first message that you successfully extracted the systembag.kb and also the corresponding iv and key from Effaceable Storage to decrypt the key bag.

Unfortunately, I am not able yet to extract the IV and KEY from the Effaceable Storage.
Did you extract them with get_bag1 from https://github.com/russtone/systembag.kb ? I tried it but I always get a "Killed: 9" error message.

I would just need help for this step now.

Thanks in advance and best regards.

Hi, so what's was the your success in this case? Any tips for me? Sad now I trying to decrypt my Mac pro 2019 with t2 I did already obtain encryptedroot plist. And cannot now use apfs quick dump Sad
Reply


Messages In This Thread
RE: FileVault2 with extracted keybag from Apple T2 chip - by MikhailPole - 12-30-2023, 07:20 PM