Re: EFS - Please help to unsecure data

From: Galen (galennews_at_gmail.com)
Date: 02/06/05 

Date: Sun, 6 Feb 2005 14:11:25 -0500

In news:%23lEfq$CDFHA.3888@TK2MSFTNGP09.phx.gbl,
Jupiter Jones [MVP] <jones_jupiter@hotnomail.com> had this to say:

> Galen;
> These types of tools are well known, but the key is still needed.
> If there are tools available to decrypt without the keys, this is not
> the tool.
>
> Download then extract the program.
> readme.txt
> Under "Known problems and limitations"
> "The program can decrypt protected files only if encryption keys (at
> least, some of them) are still exist in the system and have not been
> tampered."
>
> --
> Jupiter Jones [MVP]
> http://www3.telus.net/dandemar/

Heyya,

Much thanks :) The information I'd been given is incorrect it seems but that
means that there's some slim hope perhaps?

There's a few good forensic tools out there that are pretty decent at
recovering files even after a complete reformat. The question then, at this
point, might be, if the keys could be recovered (in theory) where would one
search for them? There are a number of decent tools that work within or even
outside of the operating system that can recover files deleted by various
methods but I'd have no idea where this key would be. I must guess, after
all, that it would be there somewhere...

It might be interesting to set up a box just to give this a test as it's
something I've never had the chance to check out. I've encrypted files just
to make sure that I knew how it was done in case anyone should ask. These
were never 11 years of data (or even valuable applications for that matter)
so even if there had been some problem with the computer during that time
the loss of the data wouldn't have bothered me at all.

I think that makes a good project for the week. Thank you all much. I now
have something to do that's new and interesting.

Galen 

-- 
"My mind rebels at stagnation. Give me problems, give me work, give me
the most abstruse cryptogram or the most intricate analysis, and I am
in my own proper atmosphere. I can dispense then with artificial
stimulants. But I abhor the dull routine of existence. I crave for
mental exaltation." -- Sherlock Holmes

Relevant Pages

  • Re: EFS - Please help to unsecure data
    ... > If there are tools available to decrypt without the keys, ... recovering files even after a complete reformat. ... There are a number of decent tools that work within or even ... outside of the operating system that can recover files deleted by various ...
    (microsoft.public.windowsxp.general)
  • Re: EFS - Please help to unsecure data
    ... > If there are tools available to decrypt without the keys, ... recovering files even after a complete reformat. ... There are a number of decent tools that work within or even ... outside of the operating system that can recover files deleted by various ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: EFS - Please help to unsecure data
    ... >> recovering files even after a complete reformat. ... >> point, might be, if the keys could be recovered where would ... There are a number of decent tools that work within or ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.general)
  • Re: EFS - Please help to unsecure data
    ... >> recovering files even after a complete reformat. ... >> point, might be, if the keys could be recovered where would ... There are a number of decent tools that work within or ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS - Please help to unsecure data
    ... >> recovering files even after a complete reformat. ... >> point, might be, if the keys could be recovered where would ... There are a number of decent tools that work within or ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.help_and_support)