Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 3 down vote favorite
2

We have disk drive that encrypt with BitLocker . Is there any way to hack or crack and recover our data?

my key is lost. AND we haven't any backup from those data!

share|improve this question
2  
Was the key randomly generated, or derived from a password? Where was the key stored: in a TPM? in a Windows installation somewhere (and if so, did you make backups of that)? – Gilles Jan 2 at 13:57

1 Answer

up vote 6 down vote accepted

Unlikely. It's AES-CBC-128, so there's no chance of you cracking the key.

There are a few tools (e.g. Volatility, or Elcomsoft's forensics suite) that can recover the master key from a system memory dump, but that only works if the drive is already mounted and unlocked.

share|improve this answer
2  
Properly designed encryption has no backdoors and no recourse upon loss of the key. Exercise the 100% hindsight gained and do backups in future. – Fiasco Labs Jan 3 at 5:01
Or even just backup the volume key with a recovery password, which is one of the first things that BitLocker asks you to do for safety. – Polynomial Jan 3 at 6:49
I'm one of those belt'n suspenders type guys that finds both to be a really good idea. – Fiasco Labs Jan 4 at 3:04

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.