Practical Cryptographic Key Recovery - Jesse Kornblum

ePAPER READ

DOWNLOAD ePAPER

jessekornblum.com

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

START NOW

Tool Marks• Marks specific toindividual tools• Associated withphysical forensicsImage courtesy Flickr user grendelkhan, http://flickr.com/photos/grendelkhan/118876699/

Google Earth Cache Forensics - Jesse Kornblum

Applying the Science of Similarity to Computer ... - Jesse Kornblum

Windows Memory Forensics and Direct Kernel ... - Jesse Kornblum

Windows Memory Analysis - Jesse Kornblum

Windows Memory Forensics and DKOM - Jesse Kornblum

Current Methods• Source code analysis– Requires elbow grease– Can't be automated– Works great– May have to update for each version– See "Volatools" paper by Walters and Petroni, BlackHatFederal 2007

Tool Marks• Marks specific toindividual tools• Associated withphysical forensicsImage courtesy Flickr user grendelkhan, http://flickr.com/photos/grendelkhan/118876699/

Page 4 and 5: Current Methods• Brute Force- Try
Page 8: TPAM6
Page 12 and 13: BitLocker Drive Encryption• I am
Page 14 and 15: BitLocker Drive Encryption• Brute
Page 16 and 17: BitLocker Tool Marks• AES key sch
Page 18 and 19: AlgorithmPool TagAES key in schedul
Page 20 and 21: BitLocker Tool Marks• Not perfect
Page 22 and 23: Performance• Brute Force- O(nm)
Page 24 and 25: Questions?• Introduction• Targe
Page 26 and 27: References• BitLocker Drive Encry

Practical Cryptographic Key Recovery - Jesse Kornblum

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?