Password Cracking AES-256 DMGs and Epic Self-Pwnage FEBRUARY 7, 2013 BY JEREMIAH GROSSMAN WhiteHat Security Blog
Two weeks ago I was in the midst of a nightmare. I'd forgotten a password. Not just any password. THE password. Without this one password I was cryptographically locked out of thousands and gigabytes worth of files I care about. Highly sensitive and valuable files that include work documents, personal projects, photos, code snippets, notes, family stuff, etc. The password in question unlocks these files from the protection of locally stored AES-256 encrypted disk image. A location where an "email me a password reset link" is not an option. File backups? Of course! Encrypted the same way with the same password. Password paper backup? Nope. I'll get to that. I somehow needed to "crack" this password. If not, the amount of epic self-pwnage would be too horrible to imagine. Before sharing how I got myself into this predicament, it's necessary to reveal some details about my personal computer security habits. More specifics than I'm normally comfortable sharing. ... http://blog.whitehatsec.com/cracking-aes-256-dmgs-and-epic-self-pwnage/ _______________________________________________ Medianews mailing list [email protected] http://etskywarn.net/mailman/listinfo/medianews_etskywarn.net
