> For your reference, records indicate that
> Robert Peirce <
b...@peirce-family.com> wrote:
>
> > Mine are protected by passwords. I made the mistake of putting them in
> > my keychain which made them available to anybody with my login. I fixed
> > that. Now I want to change the password to something more secure but I
> > can't find any way to do that short of creating a new sparsebundle.
>
> I doubt there's an "easy" way to do that, since you do essentially have
> to re-encrypt all the data with a new password.
No, that isn't necessary. The content of encrypted disk images are
encrypted using AES, with a randomly generated 128-bit or 256-bit key
(by default). The 128-bit key is stored in the disk image, encrypted
using the password. If you change the password, the key is decrypted
(using the old password) then encrypted again (using the new password)
and written back to the disk image. The data portion of the disk image
is not modified.
FileVault 2 operates on the same principle.
At least in the case of FileVault 2, there can be multiple passwords,
each of which accesses its own encrypted copy of the key.
--
David Empson
dem...@actrix.gen.nz