osfmk/vm/vm_pageout.c

420 boolean_t vm_pages_encrypted = FALSE; /* are there encrypted pages ? */
2130 				 * because it is being encrypted (see
2299 				 * if it's being encrypted during a
4707 	 * Just mark the UPL as "encrypted" here.
4908 			 * the caller never sees encrypted data.
4910 			if (! (cntrl_flags & UPL_ENCRYPT) && dst_page->encrypted) {
5017 				 * encrypted and the user would be very
5018 				 * confused to see encrypted data instead
5207 				 * The page is going to be encrypted when we
5210 				dst_page->encrypted = TRUE;
5214 				 * encrypted data.
5216 				dst_page->encrypted = FALSE;
5939 				 * get an encrypted page here.  Since the encryption
7042 				 * If the page was already encrypted,
7736 		 * If the page is encrypted, we need to decrypt it,
7741 		    dst_page->encrypted ||
8248  * Rationale:  the user might have some encrypted data on disk (via
8252  * pager.  The data would then be stored on disk in clear (not encrypted)
8258  * pages it gathers for pageout be encrypted, via the UPL interfaces,
8266  * address space.  We don't want the user to unknowingly access encrypted
8267  * data, so we have to actually remove the encrypted pages from the page
8272  * we have to make sure it's not encrypted.
8760 	if (page->encrypted) {
8762 		 * Already encrypted: no need to do it again.
8813 	 * page to obfuscate the encrypted data a bit more and
8863 	page->encrypted = TRUE;
8899 	assert(page->encrypted);
8986 		 * It was encrypted as part of paging, which "cleans"
8988 		 * Noone could access it after it was encrypted
8995 	page->encrypted = FALSE;
9118 		 * access it while it's encrypted.  After that point, all
9120 		 * while the page is busy being encrypted.  After the