Practical Cryptographic Key Recovery - Jesse Kornblum

More documents

Recommendations

Info

References• BitLocker Drive Encryption– N. Kumar and V. Kumar, "Bitlocker and Windows Vista",http://www.nvlabs.in/node/9– FIPS Security Policy:http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp947.pdf• Brute Force Searches– C. Hargeaves and H. Chivers, "Recovery of Encryption Keysfrom Memory Using a Linear Scan",http://ieeexplore.ieee.org/Xplore/login.jsp?url=/iel5/4529302/4529303/04529504.pdf
References• Key Schedule Searching– Cold Boot paper, http://citp.princeton.edu/memory/• Source Code Analysis– AAron Walters and Nick Petroni, Volatools, Volatools:Integrating Volatile Memory Forensics into the DigitalInvestigation Process, http://4tphi.net/fatkit/
Page 4 and 5: Current Methods• Brute Force- Try
Page 6 and 7: Current Methods• Source code anal
Page 8: TPAM6
Page 12 and 13: BitLocker Drive Encryption• I am
Page 14 and 15: BitLocker Drive Encryption• Brute
Page 16 and 17: BitLocker Tool Marks• AES key sch
Page 18 and 19: AlgorithmPool TagAES key in schedul
Page 20 and 21: BitLocker Tool Marks• Not perfect
Page 22 and 23: Performance• Brute Force- O(nm)
Page 24 and 25: Questions?• Introduction• Targe

Practical Cryptographic Key Recovery - Jesse Kornblum

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?