Practical Cryptographic Key Recovery - Jesse Kornblum

More documents

Recommendations

Info

BitLocker Drive Encryption• Brute Force works– FVEK is in RAM• <strong>Key</strong> schedule search works– Finds several schedules– Two of the keys make up the FVEK• Some assembly required• Source code analysis– Not an option for most of us
BitLocker Tool Marks• BitLocker AES key schedules– Several schedules in memory at any given time– Some bits of FVEK used to generate sector keys– Other bits of FVEK used to encrypt/decrypt data– In default mode, some bits unused
Page 4 and 5: Current Methods• Brute Force- Try
Page 6 and 7: Current Methods• Source code anal
Page 8: TPAM6
Page 12 and 13: BitLocker Drive Encryption• I am
Page 16 and 17: BitLocker Tool Marks• AES key sch
Page 18 and 19: AlgorithmPool TagAES key in schedul
Page 20 and 21: BitLocker Tool Marks• Not perfect
Page 22 and 23: Performance• Brute Force- O(nm)
Page 24 and 25: Questions?• Introduction• Targe
Page 26 and 27: References• BitLocker Drive Encry

Practical Cryptographic Key Recovery - Jesse Kornblum

Create successful ePaper yourself

Delete template?

Save as template?