3 ms·
I have no comment on the tool you're talking about, but some obvious facts come to mind... I am not familiar with this product and may be wrong...but it seems
by logicalmind 17y ago
I have no comment on the tool you're talking about, but some obvious facts come to mind...
I am not familiar with this product and may be wrong...but it seems as though this password is entered before the OS is booted. The only code that runs before that point is in the MBR (http://en.wikipedia.org/wiki/Master_boot_record http://en.wikipedia.org/wiki/Master_boot_record). The maximum length of code is 446 bytes. Disassembling this amount of code should be trivial for a hacker.
Additionally, it makes no sense to break AES256 as other have pointed out, but there is no reason to do so. Presumably, the encryption software must know the key to decrypt the drive in order to boot (I'm assuming). So the key has to be in long-term storage (ie. on the hd itself) in some form or another.
If one were so inclined, it would seem that the easiest approach would be to disassemble to MBR to determine where it finds the key, and then use the key to decrypt the hd.
I'd love to hear comments if I'm way off. This sounds kinda fun.