Collaborate Disseminate
EFS private key is normally encrypted by users Windows password, but when PIN (and TPM magic) is used to sign user in using Windows Hello, the user’s passphrase is not used at all…so how can Windows access EFS private key since user passwo… Continue reading How is EFS key protected and unprotected when Windows Hello PIN is used?
EFS private key is normally encrypted by users Windows password, but when PIN (and TPM magic) is used to sign user in using Windows Hello, the user’s passphrase is not used at all…so how can Windows access EFS private key since user passwo… Continue reading How is EFS key protected and unprotected when Windows Hello PIN is used?
There are many articles out there stating that a user’s encrypted files are lost after an administrator resets the password of that user.
I tried:
Logged on as user (Domain User) with password 54321
created a file named test.txt on the de… Continue reading EFS-encrypted files not lost when domain admin resets password
A cute name but an annoying and potentially damaging attack. Here’s what to do. Continue reading Windows “PetitPotam” network attack – how to protect against it
Recent ransomware events often include data theft in addition to just encrypting data. The Encrypting File System on Windows Pro/Enterprise editions encrypts individual files using a private key stored alongside certificates for that user … Continue reading Does EFS protect against data theft by ransomware?
A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used PCUnlocker to forcefully reset my pass… Continue reading Crack Windows 10 password with Cain and Able
I’m trying to copy EFS-encrypted files from an NTFS partition using:
ntfsdecrypt -k mycert.pfx /dev/sda2 -i 32768
and I get:
Key does not have an EFS purpose OID
Failed to extract the private RSA key.
More info:
The password is indeed c… Continue reading ntfsdecrypt – Key does not have an EFS purpose OID
By now the Settings have this option
"Use my sign-in info to automatically finish setup after an update or restart" . Does it mean that prior it and when its y, if non-Administrator user is Logged In while there is an Update, he … Continue reading Windows 10 Update auto-logon EFS compromize?
I have some files on an NTFS USB drive.
The files were encrypted on a Windows 10 pc and copied to the USB.
I had to completely reinstall Windows on the PC. I do not have a backup of the USB files
I know the name of the PC, and the username… Continue reading Recovering NTFS encrypted files from a USB drive on a different machine
With EFS, we know that a symmetric key, File Encryption Key (FEK), is used for encrypting files. The FEK is then protected by encrypting it with the public key of the user that can be recovered by decrypting with their corres… Continue reading Encrypting File System(EFS): Isn’t the use of public key encryption a redundant step which doesn’t improve the security of the FEK? [closed]