+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: Stupid bitlocker/hashcat question (/thread-10190.html)
Stupid bitlocker/hashcat question - ratman - 07-04-2021
Hey all,
Hashcat newbie here with a stupid question:
I have a bitlocker image that's ONLY encrypted with a recovery key ($bitlocker$2) which hashcat doesn't support. If I change the 2 to a 1 and feed it a dictionary file full of possible recovery keys would it still crack it? I do have bitcracker but bitcracker does not have multi gpu support, hashcat does.
Any other ideas greatly appreciated. TIA!
RE: Stupid bitlocker/hashcat question - atom - 07-04-2021
You can't crack recovery keys, forget about that. IMO this mode in Bitcracker is useless because the keyspace, even optimized, is simply too big to brute force, which is why we did not add it to hashcat. AND OTOH, if you know parts of the recovery key, then you typically know all parts of it.
So the real questions is, if it is not protected with a password/pin, then it's protected with a TPM? In that case you should be able to boot the machine? I don't get it.