Brute-Forcing Lockdown Harddrive PIN Codes

Presented at Black Hat USA 2016, Aug. 3, 2016, 5:30 p.m. (30 minutes).

This presentation demonstrates a method of brute-forcing an AES-256 encrypted hard drive by spoofing the front-panel keyboard. In addition to tears into the internal design of the hard drive, and extends the work by J. Czarny & R. Rigo to validate the (in)security of any encrypted drive based on the MB86C311 chipset.

Presenters:

• Colin O'Flynn
  Colin O'Flynn has developed the world's first open-source platform for side-channel power analysis and glitching attacks, and has spoken around the world about the application of this platform to various targets. Previously he worked with Atmel developing low-power wireless embedded systems, and continues to write about FPGAs for Circuit Cellar magazine. He lives in Halifax, NS, Canada.

Links:

• https://www.blackhat.com/us-16/briefings.html#brute-forcing-lockdown-harddrive-pin-codes
• https://infocon.org/cons/Black Hat/Black Hat USA/Black Hat USA 2016/Brute-Forcing Lockdown Harddrive Pin Codes.mp4
• https://www.youtube.com/watch?v=FAwtXBXQ460
• https://www.blackhat.com/docs/us-16/materials/us-16-OFlynn-Brute-Forcing-Lockdown-Harddrive-PIN-Codes.pdf

Similar Presentations:

• REcon 2014 / Exploring the impact of a hard drive backdoor
• DEF CON 14 (2006) / Rebuilding HARD DRIVES for Data Recovery: Anatomy of a Hard Drive
• BruCON 0x09 (2017) / Knock Knock... Who's there? admin admin and get in! An overview of the CMS brute-forcing malware landscape.