(Images: How to bypass FileVault, BitLocker security)

TalkBack 8 of 17:

Next »

« Previous

• Thread View
• Flat View

hdiutil was simply used to show successful crack

the working encryption key for most of these systems is actually system-generated, not the passphrase typed in by the user. The longer key is generated and used to encrypt the data on disk. Then it in turn is encrypted using the user-supplied passphrase. This allows you to change the passphrase if you feel the need without decrypting and re-encrypting all of the data.


The hacker could have tested success by creating a stub program that attempted to read data from the encrypted set using the recovered key. If the data came back as random, then he would know that the key was incorrect; if it came back as organized data then the key was correct. But instead of going to that effort, he simply checked the key against a known good source which was revealed by the hdiutil only after the user passphrase was entered.

Posted by: terry flores   Posted on: 02/21/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Move to SUSE Linux Enterprise get 3 years of Red Hat support Novell One unified management tool for both Linux and Windows allows your mixed ... Download Now
• ENTERPRISE SECURITY MUST GET SMARTER Trend Micro Internet security threats are always changing but what types of attacks ... Download Now
• Implementing Software RAID on Dell PowerEdge Servers Dell Software RAID is an inexpensive storage method offering fault tolerance ... Download Now