4

We have disk drive that encrypt with BitLocker. My key is lost, and we haven't any backup of the data. Is there any way to hack or crack and recover our data?

  • 2
    Was the key randomly generated, or derived from a password? Where was the key stored: in a TPM? in a Windows installation somewhere (and if so, did you make backups of that)? – Gilles Jan 2 '13 at 13:57
10

Unlikely. It's AES-CBC-128, so there's no chance of you cracking the key.

There are a few tools (e.g. Volatility, or Elcomsoft's forensics suite) that can recover the master key from a system memory dump, but that only works if the drive is already mounted and unlocked.

  • 6
    Properly designed encryption has no backdoors and no recourse upon loss of the key. Exercise the 100% hindsight gained and do backups in future. – Fiasco Labs Jan 3 '13 at 5:01
  • 1
    Or even just backup the volume key with a recovery password, which is one of the first things that BitLocker asks you to do for safety. – Polynomial Jan 3 '13 at 6:49
  • I'm one of those belt'n suspenders type guys that finds both to be a really good idea. – Fiasco Labs Jan 4 '13 at 3:04
  • 2
    The Algorithm was since changed to AES-XTS 128/256 – architekt Feb 7 '18 at 7:06

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.