BestCrypt DATA_BLOCK Dumper (v1.0)

Written: 15th May 2001
Last updated: 19th May 2001

Summary

The DATA_BLOCK within BestCrypt volumes is where the "encrypted master password" is stored.

This is a simple little program written in Delphi (v5.0, though you should be able to compile it on earlier versions). It displays a textual representation of the contents of a BestCrypt DATA_BLOCK, in order to get a better feel of what goes on when you add a hidden part to a BestCrypt volume file.

For further information on the BestCrypt file format, and details on what is stored within a DATA_BLOCK, it is recommended that you obtain a copy of the BestCrypt BDK.

Download

Download the executable with full source code

Usage

  1. Run the executable
  2. Select the volume file to examine
  3. Click the "Dump DATA_BLOCK" button
The volume's DATA_BLOCK will then be displayed, and may be optionally saved to disk.

Additional:

Try creating a normal BestCrypt volume, running this program on it and saving the results to disk.

Then, add a hidden part to the volume, and run this program on the modified volume file, again saving the results to disk.

Compare the two files containing the dumped DATA_BLOCK.

Version history

Email me at: sdean12@softhome.net

Return to the Attacking OTFE; Known Security Flaws in Certain OTFE Systems page