xjwsforChrist
http://xjwsforchrist.com/

TrueCrypt users: WARNING!!!
http://xjwsforchrist.com/viewtopic.php?f=20&t=1249
Page 1 of 1

Author:  ANOMOS [ Sat Jan 18, 2014 5:43 pm ]
Post subject:  TrueCrypt users: WARNING!!!

"The Volatility memory forensics project has developed plugins that can automatically find instances of Truecrypt within RAM dumps and extract the associated keys and parameters. Previous research in this area has focused specifically on AES keys and led to the development of tools such as aeskeyfind. The Volatility plugin takes a different approach by finding and analyzing the same data structures in memory that Truecrypt uses to manage encryption and decryption of data that is being read from and written to disk. With the creation of these plugins a wide range of investigators can now decrypt Truecrypt volumes regardless of the algorithm used (AES, Seperent, combinations of algos, etc.). Users of Truecrypt should be extra careful of physical security of their systems to prevent investigators from gaining access to the contents of physical memory."
source:
http://it.slashdot.org/story/14/01/15/2214249/truecrypt-master-key-extraction-and-volume-identification

Page 1 of 1 All times are UTC - 6 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/