How to get info from an encrypted harddrive.

If someone has physical access to your computer that is encrypted they can pretty easy extract the encryption key from the RAM memory. All you have to do is boot up on a USB stick that is prepared for the purpose and you can dump the memory thats been stored in the RAM. When you turn of your computer the information it has stored in the RAM will still be in the RAM after the computer is turned of, but only for a brief period of time. It can be all betwee a few secs to 10 mins before its gone. It will start to deteriate thou. So if you want to do this you have to be quick. Anyways. Why this is usefull is because the encryption key for your harddrive is stored in the RAM. So once you have dumped the ram you just need to extract it. I read about it here.

And here is an instruction how to make a USB-stick that extracs the RAM memmory.

Leave a Comment

Please note: Comment moderation is enabled and may delay your comment. There is no need to resubmit your comment.