Skip to content

Can Dislocker decrypt Volume Master Key by using BitLocker Recovery Key? #312

@MaxFuwin

Description

@MaxFuwin

There is a volume master key which is encrypted by AES_CCM Mode and if I want to decrypt it, I have to use my BitLocker Recovery Key to decrypt it.
Here is my VMK data:

WK entry found at 0x18b
WhK encrypted wi th Recorery Passwrord found at Oxlac
Salt: d38448636bd2c527fe1f90eGbeefe2c2
Searching AES-CCht from 0x1c8
Trying offset 0x25b.
WK encrypted writh AES-CCR!!
RP Nonce: boc7a3a8701fd9010f000000
RP AAC: 1ab5507f1317deb7gdTec0e87eb6e468
RP WHK: cae4f£60£6bc323+977+468eb2a8834575028d496f7e8225fa2651275343044687ba4e9f4de765542192d79e

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions