Passware Kit Forensic

[kendrik578]

OK, so i came across this program called Passware Kit Forensic
and supposedly it can decrypt various programs and files including TrueCrypt volumes. So, whats your take on it? Has anyone ever tested this? Can it REALY decrypt TrueCrypt volumes? I don't know if i can believe this.

 

[poltergeisty]

Apparently the Truecrypt volume has to be mounted. So it's useless. http://www.lostpassword.com/hdd-decryption.htm\

I use individual portable volumes. You won't decrypt that.

Looks like the pirate bay has a copy in portable. I'll have to give it a shot on Truecrypt.

 

[kendrik578]

Apparently the Truecrypt volume has to be mounted. So it's useless. http://www.lostpassword.com/hdd-decryption.htm\

I use individual portable volumes. You won't decrypt that.

Looks like the pirate bay has a copy in portable. I'll have to give it a shot on Truecrypt.

So your saying that No it can not decrypt a TrueCrypt volume?

I tried that Passware from the PB and it couldn't even decrypt a simple word file.

 

[poltergeisty]

Well there you have it.

 

[poltergeisty]

I just tested the Truecrypt portion and it in fact works at brute forcing and finding the password. I used something simple and set it to the right size though. Now Truecrypt allows you to use so-called keyfiles so this attack won't work on truecrypt protected volumes using keyfiles. I always use keyfiles from DVD's

 

[questnz]

Truecrypt would take months and months of continuous running of any software to decrypt depends on strength of encryption. I tried Passware on small 256 MB USB stick encrypted with MS Bitlocker and for sure it found the key in less than 10 minutes. Hate to thing how much would take to scan 1 TB hard Disk?!. On Truecrypt AES256 encrypted volume it said it will take 7 month+ to scan ??!!! No results guarantee.
Passware will REMOVE most passwords from files rather than DECRYPT them. It has its uses.

 

[kendrik578]

I just tested the Truecrypt portion and it in fact works at brute forcing and finding the password. I used something simple and set it to the right size though. Now Truecrypt allows you to use so-called keyfiles so this attack won't work on truecrypt protected volumes using keyfiles. I always use keyfiles from DVD's

What enc method did you use?

I usually use AES-Twofish-Serpent for my volume's.

 

[poltergeisty]

The encryption doesn't matter. All it is doing is brute forceing. At any rate, I used Serpent Twofish AES.

 

[bezking]

If your password is "abc" or "password" then this thing will have a shot at guessing it. Like others have said it's not decryption per se, it's just guessing random passwords. Of course if your password is something like ~8"4Xj3$K&x7=peUAw:|dV1PmnR}EU.w)Pik+#l~H/RisVX#]w2zII6=%7~MYd* there's no way in hell this tool will even have a chance.

 

[poltergeisty]

A password like that means you need to save it to a text file. :lol: I use GRC many times. Great stuff there!