Another forgotten TrueCrypt password (x2)

[LittleGoose]

Hey, I've not used two of my TrueCrypt volumes for months and I've forgotten both their passwords. However, for both of them I remember most of the password and in one case I can remember all the letters used just not which one is capilatised or where two of the symbols belong, if they are there at all.

I've tried for a while to remember the passwords but I'm running short on patience but I know I'm not far away...for one of them at least. I've never had the problem before (at least one that couldn't be solved by resetting the password) so I'm a bit lost.

Does anyone know if there is program which can give me a list of possible passwords based on the characters/symbols I input. There can't be all that many possibilities but for me to run through changing and cross checking it would take a long time...I'm looking to save some of the hassle.

One of the volumes I'm not too bothered about loosing but the other is quite important to me: lots of photos that I really don't want to loose. I guess I hadn't realised just how powerful TrueCrypt is.

Any help would be greatly appreciated.

[tateu]

If you know Python, this is a pretty good word list generator that uses Regular Expression syntax: http://code.activestate.com/lists/python-list/551502/. You could use it to create a word list to feed into one of the available TrueCrypt brute force applications or directly call TrueCrypt for each password.

There are a few TrueCrypt brute force applications that I know of. The following is reprinted from: http://www.tateu.net/forum/viewtopic.php?f=2&t=246

Originally Posted by tateu

For the 1 or 2 of you out there trying to brute force the password on your TrueCrypt volume, I thought I'd put together a list of programs I know of that can (try to) accomplish this task. This task is not for the impatient.

On a dual quad core Xeon machine running 16 threads:
Selecting a single Hash Algorithm (SHA512) and a single Encryption Algorithm (AES) I can try 9700 passwords per second using Ivan Golubev's Password Recovery Suite (in CPU mode) and about 4800 p/s using OTFBrutusGUI. If I had a supported GPU I could supposedly get around 27000 p/s using Ivan Golubev's Password Recovery Suite (in GPU mode).

But even 27000 p/s is extremely slow unless you can somehow shorten the amount of characters in your password that you need to bruteforce.

A 6 character password (and most software recommends your password to be even longer) using a combination of upper and lower case plus digits contains 56,800,235,584 passwords which, at 27000 p/s, would take 24.35 days to crack. And that's assuming you have a supported GPU and you are sure that you used SHA512. If you're not sure which hash algorithm or encryption algorithm you used, the fastest option I have access to is OTFBrutusGUI trying only about 287 p/s, which would take about 2314 days to crack that same 6 character password



Free Packages

OTFBrutusGUI (written by me, so I am probably a little biased)
http://www.tateu.net/software/dl.php?f=OTFBrutusGUI
Supports all encryption algorithms, hash algorithms and encryption modes (including Legacy methods) for every TrueCrypt version from v1.0 through the current v7.1a
Supports all volume types (Normal, Hidden, Hidden Legacy and System)
Supports keyfiles
Supports file and device based containers
Supports header backup files
Supports precomputed word lists or can generate its own
Is faster than most of the other free packages on my dual quad core Xeon Win7 machine, except for Ivan Golubev's Password Recovery Suite using only SHA512


Ivan Golubev's Password Recovery Suite
http://www.golubev.com/igprs/
For SHA512, this is the fastest I have tested. In CPU mode, it is twice as fast as any of the other free programs I have tried and it is supposed to be even faster if you have a supported GPU (which I do not)
Supports other volume types besides just TrueCrypt (Apple IOS backups, Blackberry backups and WPA/WPA2 handshakes)
SHA512 only
RipeMD, Whirlpool not supported
Keyfiles not supported
Legacy CBC, LRW Modes not supported
Legacy SHA1 not supported
Legacy Blowfish, Cast5, DES3, IDEA not supported
Supports precomputed word lists or can generate its own


TCHead
http://16s.us/TCHead/
Cascaded ciphers not supported
Keyfiles not supported
Legacy CBC, LRW Modes not supported
Legacy SHA1 not supported
Legacy Blowfish, Cast5, DES3, IDEA not supported
Supports precomputed word lists


unprotect.info
http://unprotect.info/download/
Keyfiles not supported
Cascaded ciphers not supported
Hidden volumes, System volumes, encrypted partitions and encrypted drives not supported
Legacy CBC, LRW Modes not supported
Legacy SHA1 not supported
Legacy Blowfish, Cast5, DES3, IDEA not supported
Generates its own word list


TCBrute
http://securityvision.ch/index.php?o...d=51&Itemid=58
v2.7 crashes on my Win7 64 bit machine


truecrack
http://code.google.com/p/truecrack/
I have not tried this, it is source code only and I haven't gotten around to trying to compile it. It does include Cuda algorithms for supported NVidia GPUs.
RipeMD only
AES only
SHA512, Whirlpool not supported
Twofish, Serpent not supported
Keyfiles not supported
Legacy CBC, LRW Modes not supported
Legacy SHA1 not supported
Legacy Blowfish, Cast5, DES3, IDEA not supported



Commercial Packages

AccessData Password Recovery Toolkit
http://accessdata.com/products/compu...ecoverytoolkit
Out of my price range, have not tried it

[LittleGoose]

Thanks for the reply Josh.

Unfortunately, I'm not familiar with Python, or any language other than English: my background is in science.

I've downloaded your program and once I've read how to use it correctly I'll give it a try. I'll update with any success I have.

Thanks again.


P.S. Sorry to whomever had to move my thread to the correct subsection.