Re: brute forcing FDE

[Robin Wood <robin () digininja org>]

On 13 April 2012 13:38, Chris Teodorski <chris.teodorski () gmail com> wrote:
> Ya I realized that, but Alex had some good numbers on amount of time the
> memory was viable from different test he ran, how cold he got it, etc.  Just
> thought it might be a worthwhile reference.
OK, I'll have a look.

Robin

> Chris
>
>
> On Friday, April 13, 2012, Robin Wood wrote:
> > On 13 April 2012 13:12, Chris Teodorski <chris.teodorski () gmail com> wrote:
> > > Not exactly what you were looking for, but Alex Volynkin from Trustwave
> > > has
> > > done some very cool practical work with cold boot and compressed air
> > > computer cleaning stuff to stretch the length of time the memory is
> > > viable.
> > >  Might be worth checking out.
> >
> > That is the cold boot attack I said I was also going to try.
> >
> > Robin
> >
> > > Chris
> > > Aka Can0beans
> > >
> > >
> > > On Friday, April 13, 2012, Robin Wood wrote:
> > > > Can anyone recommend any good tools for brute forcing full disk
> > > > encryption? I've got a client who says they will turn up with a laptop
> > > > with FDE and want me to see what info I can get off it, no idea what
> > > > product they are using but I would assume that it is probably a
> > > > machine running Windows.
> > > >
> > > > I'm going to try a cold boot attack as well but would like to at least
> > > > throw a basic dictionary at it just in case.
> > > >
> > > > Robin
> > > > _______________________________________________
> > > > Pauldotcom mailing list
> > > > Pauldotcom () mail pauldotcom com
> > > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > > Main Web Site: http://pauldotcom.com
> > >
> > >
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom () mail pauldotcom com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com