Encryption

Apple uses its own Apple FileSystem (APFS) that presents multiple modern features, including strong encryption. All Mac computers are shipped with the FileVault disk encryption system that utilizes the XTS-AES-128 algorithm to protect critical data. It is also possible to encrypt the whole disk and make it accessible only with valid credentials or a recovery key (FileVault 2). Once the user enables the FileVault feature, it is required to authenticate before using the Target Disk Mode, where a device can be attached to another machine and become accessible as an external device. Newer models of Mac computers are shipped with a dedicated Apple T2 chip and have the disk encryption enabled by default. In this case, optional FileVault provides extra protection by requiring credentials to be provided before decryption, otherwise, encrypted SSDs can be decrypted by simply attaching them to the corresponding Mac. In addition, the Apple T2 security chip enables Secure Boot to implement...