06-25-2015, 08:31 AM
(06-24-2015, 04:46 PM)mrleau Wrote:(06-24-2015, 11:09 AM)atom Wrote: Which application is using 32768:3:1 the setting?
Android 4.4.4 to 5.1.1. If you look in https://android.googlesource.com/platfor.../cryptfs.h you'll see the scrypt parameters. I don't have a way to get the hash from the trustzone. Just looking at how feasible it is once I can get the hash.
The scrypt part is just one of many steps. Afaik there's no way yet to offline crack an android hash because of the cipher key on chip which you can not read. Therefore the attack, or at least parts of it, must be done on the device itself.