[devdoomari]

does this mean that all passwords for osx-encrypted-drives have been 'recoverable'? e.g. if I created an encrypted drive using El Capitan, someone else can crack my drive's password without even cracking a password-hash?

Or is there a bug also in high-sierra's 'create-encrypted-disk' functionality? (but not in lower-versions)

[arghwhat]

The bug would be that for encrypted APFS volumes made using Disk Utility and similar applications, the password hint was accidentally set as the password itself.

High Sierra is the first OS X release with APFS.

[futurix]

Only in the passwords created using GUI version of the new Disk Utility (command line is safe).

[devdoomari]

thank you! thought I was screwed...