Why “没有发现密码” message for BitLocker recovery?

By 西数科技 司法鉴定服务中心IT技术文章, , , With 0 comments

Passware Kit shows “No password” or “Password not found” message in case no “Password” protection was set in BitLocker encryption. Mostly it means your BitLocker volume was encrypted with a Recovery Key which cannot be found with the brute-force method but only extracted from a memory image or hiberfil.sys. Please refer to the image below showing the Log in such cases:

Log.JPG

To check what protectors were used, you can get a list of protectors for your BitLocker encrypted volume using the following steps:

1. Press “Start” button, write “cmd” in the search field, right-click cmd.exe and choose “Run as Administrator.
2. Press “Yes” in the appeared window
3. In the black window after C:\Windows\system32>right-click on the line and paste the following:
C:\Windows\System32\manage-bde.exe -status X: , where X is the volume or partition letter

You should get the answer like the following:

C:\pk-test-cases>C:\Windows\System32\manage-bde.exe -status f:
BitLocker Drive Encryption: Configuration Tool version 6.1.7601
Copyright (C) Microsoft Corporation. All rights reserved.

Volume F: [New Volume]
[Data Volume]

Size: 4,88 GB
 BitLocker Version: Windows 7
 Conversion Status: Fully Encrypted
 Percentage Encrypted: 100%
 Encryption Method: AES 128 with Diffuser
 Protection Status: Protection On
 Lock Status: Unlocked
 Identification Field: None
 Automatic Unlock: Disabled
 Key Protectors:
 Password
 Numerical Password

If you do not have “Password” mentioned under “Key Protectors”, then Passware Kit cannot assign Brute-force attack on your BitLocker encrypted volume. 

We can only recommend you to try searching for the protectors used on other devices and disks.

西数科技: 司法鉴定/产品质量鉴定/检验检测/数据恢复专家. 4006184118