4 ms·
Allegedly it's 256-bit AES and would take thousands of years to brute force. (Allegedly, because of course there's no way for me to easily verify!)
by de_dave 10y ago
Allegedly it's 256-bit AES and would take thousands of years to brute force. (Allegedly, because of course there's no way for me to easily verify!)
- wepple 10y agoa 256-bit AES key might take eternity, but if it's derived directly from 8-char ASCII the search space is tiny. Somewhat does depend on how it's actually implemented in hardware, however.
- bb88 10y agoOr even better, the key is determined randomly, and the 8 char password decrypts the key.
- JaRail 10y agoThe 8 char password does not decrypt the key; it unlocks/retrieves it. The drive will only allow a fixed number of attempts. Once past the 10 or whatever allowed attempts, an attacker needs to brute force the full encryption key. It should be a very similar scheme to what you get with a modern smartphone, such as a new iPhone. (Not one of the older iphones the FBI cracked recently, a new one with a Secure Enclave.)
- na85 10y agoWhat stops the attacker from just imaging the drive in its encrypted state and continuing to run attacks on the 8 char password well in excess of 10 attempts?
- jcrawfordor 10y agoThe drive controller does not allow you to read the encrypted form of the data out. This kind of drive-encryption is the same as the common ATA lock command (implemented in your BIOS and the drive controller), but the drive controller actually encrypts the data as well as just refusing to work without being unlocked first.
- wepple 10y agoThis relates to my "does depend on how it's actually implemented in hardware, however." comment. This can be implemented in secure hardware (and without getting into attacks against that), you can make a password attempt, but can't modify the counter which tracks how many incorrect attempts have been made. Sufficient incorrect attempts will see the key material destroyed.
- DanBC 10y agoHopefully not like this: http://www.h-online.com/security/features/Enclosed-but-not-encrypted-746199.html http://www.h-online.com/security/features/Enclosed-but-not-e... That drive claimed 128 bit AES, but they botched it.