2 ms·
There are forensic tools that grab {n} number of sectors from the drive image, then upload it to a cloud that has a massive farm of servers that brute force the
by LinuxBender 7y ago
There are forensic tools that grab {n} number of sectors from the drive image, then upload it to a cloud that has a massive farm of servers that brute force the blocks using all known ciphers and strings. Brute forcing anything is possible, especially if using symmetric encryption only. The CPU cycles (and cost) to break the passphrase depend on the complexity.
If the disk encryption used a combination of a strong passphrase and a large key (usb device, etc) then the probability of decrypting the drive becomes highly unlikely.
Anyway, I am no lawyer, but the person should assume the police are lieing either way. Their lawyer should have told them this and to keep their mouth shut. The police could be playing mind games. Mind games are the cheapest way to decrypt a drive or get someone to admit guilt.