![]() ![]() ![]() The crypt key mining: a digital forensic examiner can try to recover the deleted key from the examined mobile device. The new key can be used to decrypt old databases. If your client has the SIM-card used for the crypt key generation on the examined device, we can get a new key via reinstalling WhatsApp. Of course, there are methods of extraction the crypt key from non-rooted devices, but these techniques can be applied to a limited number of devices. But it’s not always possible due to software and hardware issues of some mobile devices. Usually to extract the crypt key a digital forensic examiner must perform a physical extraction from the device. The main problem of decryption encrypted WhatsApp databases is that the key is always stored on the device, but encrypted databases can be also stored on it’s SD card, for example. So, what is the crypt key? It is a file with “key” name stored in userdata/data/сom.whatsapp/files/. In this article we’ll speak about available methods of the key extraction or recovery and the perspectives of decryption of encrypted WhatsApp databases without the crypt key. ![]() Every month our lab receives lots of requests to decrypt encrypted WhatsApp databases without the crypt key. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |