[SOLVED] How to handle TrueCrypt hidden *container*?

[dydx]

Hi,

How to handle Truecrypt hidden containers (not hidden partitions/OS)?

I created a test file (TC 7.1a) with RIPEMD-AES as outer container and RIPEMD-Serpent-Twofish-AES as hidden container.

I can successfully get the outer container:

Code:

hashcat --status -m 6213 -a 0 -w 3 2012/2012-test4.tc 2012/dict.txt hashcat (v6.1.1) starting... OpenCL API (OpenCL 1.2 ) - Platform #1 [Intel(R) Corporation] ============================================================= * Device #1: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, skipped * Device #2: Intel(R) HD Graphics 4000, 1336/1400 MB (350 MB allocatable), 16MCU Minimum password length supported by kernel: 0 Maximum password length supported by kernel: 64 Hashes: 1 digests; 1 unique digests, 1 unique salts Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates Rules: 1 Applicable optimizers applied: * Zero-Byte * Single-Hash * Single-Salt * Slow-Hash-SIMD-LOOP Watchdog: Hardware monitoring interface not found on your system. Watchdog: Temperature abort trigger disabled. Host memory required for this attack: 99 MB Dictionary cache built: * Filename..: 2012/dict.txt * Passwords.: 11 * Bytes.....: 200 * Keyspace..: 11 * Runtime...: 0 secs The wordlist or mask that you are using is too small. This means that hashcat cannot use the full parallel power of your device(s). Unless you supply more work, your cracking speed will drop. For tips on supplying more work, see: https://hashcat.net/faq/morework Approaching final keyspace - workload adjusted. 2012/2012-test4.tc:KYTaNF5aXnrKakHQaTJL Session..........: hashcat Status...........: Cracked Hash.Name........: TrueCrypt RIPEMD160 + XTS 1536 bit Hash.Target......: 2012/2012-test4.tc Time.Started.....: Tue Nov 24 04:32:40 2020 (1 sec) Time.Estimated...: Tue Nov 24 04:32:41 2020 (0 secs) Guess.Base.......: File (2012/dict.txt) Guess.Queue......: 1/1 (100.00%) Speed.#2.........:      18 H/s (4.33ms) @ Accel:64 Loops:16 Thr:8 Vec:1 Recovered........: 1/1 (100.00%) Digests Progress.........: 11/11 (100.00%) Rejected.........: 0/11 (0.00%) Restore.Point....: 0/11 (0.00%) Restore.Sub.#2...: Salt:0 Amplifier:0-1 Iteration:1984-1999 Candidates.#2....: 02938483 -> KYTaNF5aXnrKakHQaTJL Started: Tue Nov 24 04:32:38 2020 Stopped: Tue Nov 24 04:32:42 2020

However, the inner container fails:

Code:

hashcat --status -m 6213 -a 0 -w 3 2012/2012-test4.tc 2012/dict.txt hashcat (v6.1.1) starting... OpenCL API (OpenCL 1.2 ) - Platform #1 [Intel(R) Corporation] ============================================================= * Device #1: Intel(R) Core(TM) i5-3320M CPU @ 2.60GHz, skipped * Device #2: Intel(R) HD Graphics 4000, 1336/1400 MB (350 MB allocatable), 16MCU Minimum password length supported by kernel: 0 Maximum password length supported by kernel: 64 Hashes: 1 digests; 1 unique digests, 1 unique salts Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates Rules: 1 Applicable optimizers applied: * Zero-Byte * Single-Hash * Single-Salt * Slow-Hash-SIMD-LOOP Watchdog: Hardware monitoring interface not found on your system. Watchdog: Temperature abort trigger disabled. Host memory required for this attack: 99 MB Dictionary cache built: * Filename..: 2012/dict.txt * Passwords.: 11 * Bytes.....: 140 * Keyspace..: 11 * Runtime...: 0 secs The wordlist or mask that you are using is too small. This means that hashcat cannot use the full parallel power of your device(s). Unless you supply more work, your cracking speed will drop. For tips on supplying more work, see: https://hashcat.net/faq/morework Approaching final keyspace - workload adjusted. Session..........: hashcat Status...........: Exhausted Hash.Name........: TrueCrypt RIPEMD160 + XTS 1536 bit Hash.Target......: 2012/2012-test4.tc Time.Started.....: Tue Nov 24 04:33:07 2020 (1 sec) Time.Estimated...: Tue Nov 24 04:33:08 2020 (0 secs) Guess.Base.......: File (2012/dict.txt) Guess.Queue......: 1/1 (100.00%) Speed.#2.........:      18 H/s (4.33ms) @ Accel:64 Loops:16 Thr:8 Vec:1 Recovered........: 0/1 (0.00%) Digests Progress.........: 11/11 (100.00%) Rejected.........: 0/11 (0.00%) Restore.Point....: 11/11 (100.00%) Restore.Sub.#2...: Salt:0 Amplifier:0-1 Iteration:1984-1999 Candidates.#2....: 02938483 -> Started: Tue Nov 24 04:33:05 2020 Stopped: Tue Nov 24 04:33:09 2020

If course, in the first case, the password list contains the password of the outer container but not the hidden and in the second case, it contains the password of he hidden container only.


Is anything special required to handle hidden TrueCrypt containers?

Bonus: The careful reader should have found something seemingly impossible to happen:

Code:

-m 6213

is the hash mode for XTS 1536 bit (i.e. Triple Encryption such as Serpent-AES-Twofish). However, the outer container is only AES, so the hash mode is wrong! How come that hashcat still finds the correct password for the outer container although the hash mode is wrong?

Thanks!