[gshulegaard]

Not quite. Investigators said they had found he had downloaded thousands of files whose hash values matched known child pornography [1]. The files were not found on his computer so they wanted to decrypt his external drive to see if they were there...

Which makes more sense to me...I believe it is unlikely that hash values would remain intact through encryption.

[1] https://arstechnica.com/wp-content/uploads/2017/03/rawlsopin...

[jsjohnst]

Wow, that link is really damning. As the passwords he willingly did give up showed CP content on his iphone, I'm unwilling to give him the benefit of the doubt on the drives.

That said, it's entirely possible still he forgot the passwords to the drives.