Detecting encryption keys from RAM

A.A. Chilikov; A.E. Alekseev

Detecting encryption keys from RAM

A.A. Chilikov¹, A.E. Alekseev²

research article Pages: 42-46

¹ к. ф.-м. н., руководитель отдела исследований, Passware
² аспирант, специалист отдела исследований, Passware

Keywords: encryption keys RAM attacks digital forensics

Abstract

Search of encryption keys in RAM is new and prospective technology that is needed, principally, in the computer forensics. For effective search the problem of recognition of encryption keys in data stream must be solved. Complexity of this problem depends significantly from target encryption algorithm. In this work we propose solutions of this problem for Twofish and Blowfish algorithms, which have never been considered before in this context

How to cite

Чиликов А.А., Алексеев Е.К. Распознавание криптографических ключей в RAM // Системы высокой доступности. 2011. № 2. С. 42–46.

References

http://cryptome.org/0003/RAMisKey.pdf.
http://www.trapkit.de/research/sslkeyfinder/keyfinder_v1.0_20060205.pdf.
http://hawaii.ms11.net///keyhide2.pdf.
http://www.dfrws.org/2009/proceedings/p132-moe.pdf.

[1] http://cryptome.org/0003/RAMisKey.pdf.

[2] http://www.trapkit.de/research/sslkeyfinder/keyfinder_v1.0_20060205.pdf.

[3] http://hawaii.ms11.net///keyhide2.pdf.

[4] http://www.dfrws.org/2009/proceedings/p132-moe.pdf.