Truecrypt
#10
hashkill does it (as far as the current git tree is concerned). It's not quite useful though - unless you know something about the password and/or the algos used. Whirlpool turned out to be a disaster on GPUs and twofish on the host side may also cap the cracking speed in certain scenarios. If you don't know what algorithms were used, you need to try all of them (3 hash algos, 3 ciphers and cascaded modes).

Here are some tables with speeds on 7970:
http://www.gat3way.eu/fde

So in most cases speed will be very low, about 2K c/s on 7970. That's of course if you try all algo combinations. You don't know what was used, because there is no plaintext header which contains such information. You may of course try the default settings where speed is much better (134K c/s) but that won't guarantee you anything unless you are sure about the default settings being used. You should take into consideration the possibility of a keyfile used and if you don't have the keyfile, cracking is impossible.

I think recovering volumes using keys from memory dumps (whenever possible) is much much much better option.


Messages In This Thread
Truecrypt - by radix - 04-11-2012, 07:31 AM
RE: Truecrypt - by Rolf - 04-11-2012, 07:37 AM
RE: Truecrypt - by M@LIK - 04-11-2012, 09:07 AM
RE: Truecrypt - by gat3way - 04-11-2012, 09:50 AM
RE: Truecrypt - by IvanG - 04-11-2012, 12:20 PM
RE: Truecrypt - by gat3way - 04-11-2012, 12:26 PM
RE: Truecrypt - by Rolf - 04-11-2012, 02:37 PM
RE: Truecrypt - by gat3way - 04-11-2012, 04:40 PM
RE: Truecrypt - by Mem5 - 01-31-2013, 08:52 AM
RE: Truecrypt - by gat3way - 01-31-2013, 01:10 PM