FROST: Forensic Recovery Of Scrambled Telephones. I.
Abstract At the end of 2011, Google released version 4.0 of its Android operating system for smartphones. For the first time, Android smartphone owners were supplied with a disk encryption feature that transparently scrambles user partitions, thus protecting sensitive user information against targeted attacks that bypass screen locks.
On the downside, scrambled telephones are a a nightmare for IT forensics and law enforcement, because once the power of a scrambled device is cut any chance other than bruteforce is lost to recover data. We present FROST, a tool set that supports the forensic recovery of scrambled telephones. Lest We Remember: Cold Boot Attacks on Encryption Keys - coldboot.pdf. Practical attacks on MD5 sums and digital signatures using MD5 message digests - 356.pdf. Information Security Resources. InfoSec Institute Resources.