Forensic Software accesses encrypted information in iPhones.November 11, 2011 -
With iOS5 support, iOS Forensic Toolkit can recover device passcodes and perform physical acquisition of Apple devices running iOS 3.x, 4.x, and 5. Program can acquire 16 Gb iPhone 4 in about 20 minutes or 32 Gb version in 40 minutes. Product also offers full support for recovering iOS5 keychains, which include stored login credentials to Web sites, Wi-Fi, and email. With plain-text passcode available, Toolkit can decrypt all items stored in keychain.
Original Press release
ElcomSoft Co. Ltd.
Zvezdnyi blvd. 21
Moscow, , 129085
Russian Federation
ElcomSoft Updates iOS Forensic Toolkit with iOS 5 Support and Faster Acquisition Times
MOSCOW, -- ElcomSoft Co. Ltd. updates iOS Forensic Toolkit, adding iOS5 and doubling the acquisition speed. With iOS5 support, iOS Forensic Toolkit can recover device passcodes and perform physical acquisition of Apple devices running iOS 3.x, 4.x and 5. By more than doubling the acquisition speed of the earlier versions, the updated Elcomsoft iOS Forensic Toolkit can acquire a 16-Gb iPhone 4 in about 20 minutes, or a 32-Gb version in 40 minutes.
Providing near-instant forensic access to encrypted information stored in the latest iPhone and iPad devices, Elcomsoft iOS Forensic Toolkit enables access to protected file system dumps extracted from supported Apple devices even if the original device passcode is unknown.
Forensic Analysis of iOS 5 Devices
While the whole security system received a minor facelift in iOS5, Apple made significant changes regarding keychain protection, replacing the encryption algorithm entirely. In addition, Apple made Escrow Keybag useless to forensic specialists by protecting escrow keys with device passcode. Apparently, the protection of iOS5 devices relies more heavily on device passcode than in earlier versions.
Keychains contain information highly valuable to forensic investigators. This includes stored login credentials to Web sites, Wi-Fi, email and application passwords, and more. With new encryption employed to protect keychain items, Elcomsoft iOS Forensic Toolkit becomes the first commercially available product offering full support for recovering iOS5 keychains.
Elcomsoft iOS Forensic Toolkit can recover the original passcode by performing a brute-force attack. With plain-text passcode available, Elcomsoft iOS Forensic Toolkit can decrypt all items stored in the keychain.
Availability and Distribution
Elcomsoft iOS Forensic Toolkit is available immediately. Access to the new tool is generally provided to qualified government and law enforcement agencies. Pricing available by request.
About ElcomSoft Co. Ltd.
Founded in 1990, ElcomSoft Co.Ltd. develops state-of-the-art computer forensics tools, provides computer forensics training and consulting services. Since 1997, ElcomSoft has been providing support to businesses, law enforcement, military and intelligence agencies. ElcomSoft tools are used by most of the Fortune 500 corporations, multiple branches of the military all over the world, foreign governments, and all major accounting firms. More information at http://www.elcomsoft.com
Elcomsoft iOS Forensic Toolkit supports Windows XP, Vista/7, 2003/2008 Server and MacOS X, and is available to select government and law enforcement customers. More information at http://ios5.elcomsoft.com
|
|
|
|
|
|
|
| 
