Windows 7: BitLocker, PGP, TrueCrypt cracked real-time

bobafetthotmail · 29 Dec 2012

Quote:

A Russian security firm has announced that their forensic disk decryptor software package can now access any information on disks that have been encrypted with industry standard programs. The program cost $299 and will work against BitLocker, PGP, and TrueCrypt; but even worse it can do it in real-time.

Full article here

Be afraid, be very afraid.

SIW2 · 29 Dec 2012

Hibernation file is always a worry. Turn of hibernation.

Don't use firewire connection. Inception | Break & Enter - Improving security by breaking it

Kaktussoft · 29 Dec 2012

If you want to secure everything.... you don't use the hibernation file.

SIW2 · 29 Dec 2012

Exactly. I always turn hibernation off.

LittleJay · 29 Dec 2012

Thanks for the good read. I use TrueCrypt myself, but have hibernation turned off, but I also never leave my computer on when I am not at it.

ionbasa · 31 Dec 2012

One thing to note:

Quote:

Acquires protection keys from RAM dumps

I would assume this means it would be able to access information from RAM, meaning that even if you have hibernation off, but say put the computer to "Sleep", RAM would still have power therefore any content is still stored on the RAM.

Basically:

Turn off hibernation
Don't use sleep, instead do a full shutdown
Lock HDD/SSD inside BIOS/EFI to prevent the system drive being swapped to another computer
In Bios/EFI only have boot to hdd enabled, disabling things such as Network Boot (PXE/Network Image), USB Boot, and CD/DVD boot.
Password lock your BIOS or RAID card(if you have one)
Lastly use a password on your Windows account for login.

If you do this then you are pretty much safe in my opinion.

Windows 7: BitLocker, PGP, TrueCrypt cracked real-time

BitLocker, PGP, TrueCrypt cracked real-time problems?