We have disk drive that encrypt with BitLocker. My key is lost, and we haven't any backup of the data. Is there any way to hack or crack and recover our data?
Asked
Active
Viewed 1.7k times
4
Anders
- 64,406
- 24
- 178
- 215
saber tabatabaee yazdi
- 1,038
- 5
- 16
- 26
-
2Was the key randomly generated, or derived from a password? Where was the key stored: in a TPM? in a Windows installation somewhere (and if so, did you make backups of that)? – Gilles 'SO- stop being evil' Jan 02 '13 at 13:57
1 Answers
10
Unlikely. It's AES-CBC-128, so there's no chance of you cracking the key.
There are a few tools (e.g. Volatility, or Elcomsoft's forensics suite) that can recover the master key from a system memory dump, but that only works if the drive is already mounted and unlocked.
Polynomial
- 132,208
- 43
- 298
- 379
-
6Properly designed encryption has no backdoors and no recourse upon loss of the key. Exercise the 100% hindsight gained and do backups in future. – Fiasco Labs Jan 03 '13 at 05:01
-
1Or even just backup the volume key with a recovery password, which is one of the first things that BitLocker asks you to do for safety. – Polynomial Jan 03 '13 at 06:49
-
I'm one of those belt'n suspenders type guys that finds both to be a really good idea. – Fiasco Labs Jan 04 '13 at 03:04
-
2