Passware Kit shows "No password" or "Password not found" message in case no "Password" protection was set in BitLocker encryption. Mostly it means your BitLocker volume was encrypted with a Recovery Key which cannot be found with the brute-force method but only extracted from a memory image or hiberfil.sys. Please refer to the image below showing the Log in such cases:
To check what protectors were used, you can get a list of protectors for your BitLocker encrypted volume using the following steps:
1. Press "Start" button, write "cmd" in the search field, right-click cmd.exe and choose "Run as Administrator.
2. Press "Yes" in the appeared window
3. In the black window after C:\Windows\system32>right-click on the line and paste the following:
C:\Windows\System32\manage-bde.exe -status X: , where X is the volume or partition letter
You should get the answer like the following:
C:\pk-test-cases>C:\Windows\System32\manage-bde.exe -status f:
BitLocker Drive Encryption: Configuration Tool version 6.1.7601
Copyright (C) Microsoft Corporation. All rights reserved.
Volume F: [New Volume]
[Data Volume]
Size: 4,88 GB
BitLocker Version: Windows 7
Conversion Status: Fully Encrypted
Percentage Encrypted: 100%
Encryption Method: AES 128 with Diffuser
Protection Status: Protection On
Lock Status: Unlocked
Identification Field: None
Automatic Unlock: Disabled
Key Protectors:
Password
Numerical Password
If you do not have "Password" mentioned under "Key Protectors", then Passware Kit cannot assign Brute-force attack on your BitLocker encrypted volume.
We can only recommend you to try searching for the protectors used on other devices and disks.
Comments
0 comments
Please sign in to leave a comment.