10-28-2022, 06:32 PM
(10-28-2022, 06:12 PM)marc1n Wrote: If you have a hash, the hashcat will recognize your encryption type https://hashcat.net/wiki/doku.php?id=fre...pt_volumes
What? No, that is not what it says.
You can't tell on veracrypt how it was encrypted. What you get, when you retrieve a "hash", is not really a hash. It's just 512 bytes of data formatted as a hash (if using the new modes).
Of those 512 bytes, the first 64 - I think it's 64 - bytes is a salt. The rest is a header, but the header itself is encrypted, so it's not possible to retrieve any encryption from it.