Apparently legacy filevault can be attacked offline with tools like john the ripper.