Re: EFS - Encryption and User Migration

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/18/05 

Date: Fri, 18 Mar 2005 11:40:32 -0600

Thanks for that information. I recommend your product to users that may be
in a situation that they can recover their EFS files. Your trial version
will at least let them know if EFS private keys are found so that they do
not have to invest in the purchase of the full version if they have no
chance of recovering their EFS files. Thanks again. --- Steve

"Vladimir Katalov" <vkatalov@elcomsoft.com> wrote in message
news:39vatbF66c6pcU1@individual.net...
> "Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
> news:O249hcpKFHA.1284@TK2MSFTNGP14.phx.gbl...
>> Those programs that claim to recover EFS files will work if two
>> conditions
>> are met - the user's private EFS key is still on the computer and the
>> user's password is known. The user's password protects the EFS private
> key.
>> If the EFS private key is not on the computer those EFS files can not be
>> recovered [well maybe NSA with their acres of computers and few years
>> ime]. --- Steve
>
> Absolutely correct.
>
> Just one note: on most Windows 2000 systems, user's password is not
> mandatory, because private keys are encrypted using the same password
> hash that is stored in the system. For more details, see our BlackHat
> presentation:
>
> --
> Sincerely yours,
> Vladimir
>
> Vladimir Katalov
> Managing Director
> ElcomSoft Co.Ltd.
> Member of Association of Shareware Professionals (ASP)
> Member of Russian Cryptology Association
> mailto:vkatalov@elcomsoft.com
> http://www.elcomsoft.com
>

Relevant Pages

  • Re: EFS - Encryption and User Migration
    ... in a situation that they can recover their EFS files. ... will at least let them know if EFS private keys are found so that they do ... The user's password protects the EFS private ...
    (microsoft.public.windows.server.migration)
  • Re: EFS - Encryption and User Migration
    ... in a situation that they can recover their EFS files. ... will at least let them know if EFS private keys are found so that they do ... The user's password protects the EFS private ...
    (microsoft.public.windows.server.general)
  • Re: How do I recover encrypted files
    ... The EFS files would either need to be backed up and restored to ... RA certificate/private key from a password protected .pfx file into his user ... The user's/RA EFS private key lives in the user's profile, ... How do I recover the files, I need to have an access to it, what is the ...
    (microsoft.public.win2000.security)
  • Re: how to recover the private key if user account is removed
    ... At his point of your setup, there is no conventional way to recover the ... > thx Steve ... > then how to recover the private key? ... >>may be able to recover the EFS files using the private ...
    (microsoft.public.win2000.security)