5

Based on Apple's developer documentation, APFS appears to support three models of disk encryption:

  • No encryption
  • Single-key encryption
  • Multi-key encryption with per-file keys for file data and a separate key for sensitive metadata

Following the upgrade to 10.13 and the in-place filesystem migration from CoreStorage/FileVault/HFS+ to Encrypted APFS, which of these models is in use?

diskutil and related tools do not appear to provide any indication of which model is in use, and I would like to know, for the purpose of data recoverability and O(1) secure file erasure capabilities, whether multi-key is in use on my machine and disks.

Improve this question

1 Answer 1

Reset to default
3

Hey you asked this a while ago but I asked the same question on the Apple community discussion board recently and apparently we were just misreading that documentation.

APFS uses both single-key and multi-key encryption models simultaneously. The single-key system encrypts the container, and each file within it is encrypted with its own key pair.

Improve this answer
1
  • 4
    Ok but you should provide a link to that discussion
    – mmmmmm
    Mar 12, 2018 at 16:36

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .