RE: Guy locked-up forever for forgetting his password.
June 26, 2016 at 2:09 pm
(This post was last modified: June 26, 2016 at 2:49 pm by Tiberius.)
(June 26, 2016 at 1:29 pm)Jehanne Wrote:(June 26, 2016 at 1:17 pm)dyresand Wrote: You can crack through that encryption since 2012 and 2013
https://www.whitehatsec.com/blog/crackin...lf-pwnage/
If anything they should get a white hack to break his password too see whats on those drives
They used a brute force method to get his password. As I said above, it has been revealed that the NSA can try a trillion guesses per second. If my password is "Apollo", it wont' take long for someone to crack that using offline methods.
The problem with that NSA figure is its not quantified. What hashing algorithm is that number based on? Generating a SHA1 hash is much quicker than generating a SHA3 hash for instance, and that's not even accounting for the number of iterations. The FileVault key is generated from 250,000 iterations of a SHA1 based algorithm. For each guess, you have to run SHA1 250,000 times. That massively increases the time it takes to crack the hash.
