3 ms·

Let him get the other consultant to do that work then.

• ErrantX 17y ago
  well that's the plan :) but he's not a one off client so if I am insane and there is a way I'd rather not let another guy show us up (my boss would hang me out :P)
  • yan 17y ago
    If there are some implementation-specific ways to recover the pw, then it'd be possible. But if he had a reasonably-complex password, then I wouldn't waste my time trying to break it.
    • ErrantX 17y ago
      It's probably fairly possible (just for background we have quite a big decryption cluster and a python/c based infrastructure for me to work with) but it's reverse engineering SafeBoot to make sure we get it right that's a pain - I cant find any research into that either. AFAIK SafeBoot moves the data that would be simplest to use to identify the decryption success (i.e. the standard stuff at the start of the disk) so picking the right bits to test would be the hardest part. Also not sure what their key generation mechanism is (and cant find research into that) so we would probably need to test the full 256 bit key (rather than a shorter password). = painful.