Decrypt TrueCrypt Image

amathian

Honorable
Dec 11, 2013
4
0
10,510
Hey! I'm sorry if this is in the wrong section, I couldn't quite find a perfect section.

So, a computer crashed here to the point where it couldn't start up. Dell is sending us a hard drive, so I would like to grab files off of the broken computer.

I loaded up CAINE (a forensic tool, able to grab disk images with it) and imaged the boken computer's drive on to my external drive (raw format).

It's about 70% done, then it hit me ... How will I decrypt the disk since it has AES256 encryption on it using Truecrypt? The obvious answer it just mounting the image, but I have a feeling it won't work for some reason.

Is there any process to decrypt the image so I can grab files from it?


Thanks a lot guys and sorry again if this is in the wrong section.
 
Solution

amathian

Honorable
Dec 11, 2013
4
0
10,510


I haven't tried, the imaging is still running, I was just asking if there is a specific process to do it because the way I'm thinking ... I feel like something is going to go wrong.
 

supasieu

Reputable
Mar 10, 2014
475
0
4,960


Do you have any CD that contain the TrueCrypt Recovery Disc? if your hdd is Encrypted with TrueCrypt, it should come with a CD/file/password. You will need to run a full permanent disk decryption to get the data back. CAINE can help you recover disk/image but still need to Decrypt the disk/image to get the data back.
 
Solution