Editing FileVault (section)

===Security===
FileVault uses the user's login password as the encryption passphrase. It uses the [[Disk encryption theory|XTS-AES]] mode of [[Advanced Encryption Standard|AES]] with 128 bit blocks and a 256 bit key to encrypt the disk, as recommended by [[NIST]].<ref name="wpfv2" /><ref>{{cite journal | url=http://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf | title=Recommendation for Block Cipher Modes of Operation: The XTS-AES Mode for Confidentiality on Storage Devices | author=Dworkin, Morris | journal=NIST Special Publication |date=January 2010 | issue=800–3E| doi=10.6028/NIST.SP.800-38E }}</ref> Only unlock-enabled users can start or unlock the drive. Once unlocked, other users may also use the computer until it is shut down.<ref name=aboutfv2 />