Since no raw or encrypted data is included in encryption metadata, the hash files produced with Elcomsoft Forensic Disk Decryptor offer significantly higher level of privacy, allowing remote and cloud processing without the risk of a data leak. You can use Elcomsoft Forensic Disk Decryptor users to set up attacks on a tiny file instead of the original encrypted container. The encryption metadata can be extracted with Elcomsoft Forensic Disk Decryptor, which is included with Elcomsoft Distributed Password Recovery and available separately.Įlcomsoft Forensic Disk Decryptor is a small tool included with Elcomsoft Distributed Password Recovery. This encryption metadata helps set up an attack by automatically applying the correct settings. Unlike TrueCrypt/VeraCrypt, BestCrypt stores information about the encryption algorithm, hash function and the number of rounds in the disk header. Follow these steps to set up an attack.ĭuring the first step, you must extract encryption metadata from the encrypted disk or virtual volume.

Our tools can only break BestCrypt disks (physical and virtual volumes) that are protected with Password Based Encryption. The default hash algorithm is SHA-512, and the number of hash rounds is 16384 (the user can alter that number). What does affect security (and the speed of the password recovery attack) is the choice of the hash algorithm and the number of hash rounds (iterations) used in the corresponding Password-Based Key Derivation Function.īestCrypt supports the following hash functions: SHA-3 (512-bit), Whirlpool (512-bit), SHA-256 and SHA-512, and Skein.īestCrypt supports several different encryption modes by default, Password Based Encryption is used. PBKDF: Hash Functions and Number of Hash Iterations As you may already know, the choice of the encryption algorithm other than AES has an effect of drastically reduces the speed of accessing data without a tangible increase in security. Similar to open-source encryption tools such as TrueCrypt/VeraCrypt, BestCrypt supports multiple encryption algorithms including AES, Blowfish, CAST, GOST 28147-89, RC6, Serpent, Twofish, and Camellia. Available for Windows, Linux, macOS and Android platforms, BestCrypt is delivered in two editions, one offering full-disk encryption and the other encrypting virtual disk volumes stored in containers, the latter being supported with our tools. BestCrypt, developed by the Finnish company Jetico, is a cross-platform commercial disk encryption tool.

Bestcrypt container