Recovering the Master Key from RAM to break Android's File-Based Encryption

Abstract

As known for a decade, cold boot attacks can break software-based disk encryption when an attacker has physical access to a powered-on device, including Android smartphones. Raw memory images can be obtained by resetting a device and rebooting it with a malicious boot loader, or—on systems where this is not possible due to secure boot or restrictive BIOS settings—by a physical transplantation of RAM modules into a system under the control of the attacker. Based on the memory images of a device, different key recovery algorithms have been proposed in the past to break Full-Disk Encryption (FDE), including BitLocker, dm-crypt, and also Android’s FDE. With Google’s switch from FDE to File-based Encryption (FBE) as the standard encryption method for recent Android devices. However, existing tools have been rendered ineffective. To close this gap, and to re-enable the forensic analysis of encrypted Android disks, given a raw memory image, we present a new key recovery method tailored for FBE. Furthermore, we extend The Sleuth Kit (TSK) to automatically decrypt file names and file contents when working on FBE-enabled EXT4 images, as well as the Plaso framework to extract events from encrypted EXT4 partitions. Last but not least, we argue that the recovery of master keys from FBE partitions was particularly easy due to a flaw in the key derivation method by Google.

Mehr zum Titel

Titel	Recovering the Master Key from RAM to break Android's File-Based Encryption
Medien	Forensic Science International: Digital Investigation
Verlag	Elsevier Ltd.
Band	36
Verfasser	Tobias Groß, Marcel Busch, Prof. Dr. Tilo Müller
Veröffentlichungsdatum	02.04.2021
Zitation	Groß, Tobias; Busch, Marcel; Müller, Tilo (2021): Recovering the Master Key from RAM to break Android's File-Based Encryption. Forensic Science International: Digital Investigation 36.