Is it possible to find the BIOS password hash in a BIOS dump and decrypt it?
For instance, a person could use flashrom Live CD to dump the BIOS with flashrom -r but how would you find the BIOS password hash in the bios dump?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
You would have to disassemble the BIOS image to be sure.
Assuming you have access to a decrypted ROM image, you might get a head start by scanning for a block of bytes that are statistically random. You should expect to find a series of exactly 20 (SHA-1) or 32 (SHA-256) bytes. Then, if you can find a reference to that location, you might have a quick place to set a breakpoint to prove your theory.