Score:0

Disable/Lengthen FileVault 2 recovery key

es flag

Can I use FileVault 2 without a recovery key? If not, can I disable decryption via the recovery key? Otherwise, can I implement a longer recovery key?

Reasoning: I use passwords that are at least 128-bits strong; soon, I will be migrating to 512-bit passwords for resistance against Grover's algorithm (not necessary for most people). According to Wikipedia, FileVault 2 recovery keys use a 35-character alphabet, and if randomly generated, are thus ~123-bits ($24\cdot\log(35)/\log(2)$) strong. This lowers the security to ~123-bits—regardless of the password—which is weaker than I'd prefer.

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.