Passware Kit 2023 v1 – AxCrypt and Instant VeraCrypt Decryption

Configuring the decryption of multiple disk images has long been a headache for computer forensics. In the past, they needed to specify the settings for each image, depending on the FDE vendor, in order to set up the password recovery or decryption process in Passware Kit. The new 2023 v1 simplifies this configuration by introducing group settings for decrypting multiple disk images in Batch Mode.

The new version of Passware Kit also supports AxCrypt files and instantly decrypts the latest versions of VeraCrypt using the improved memory analysis option.

What’s new in Passware Kit 2023 v1:

  • Simplified setup of decryption for multiple disk images
  • Password recovery for AxCrypt
  • Instant decryption of the latest VeraCrypt versions via memory analysis
  • Updated Bootable Memory Imager
  • GPU acceleration improvements
  • Improved Rainbow Tables attack

For your convenience, we have included a video of all the newest features of Passware Kit 2023 v1. Take a look!

Simplified setup of decryption for multiple disk images

The decryption of multiple disk images has become easier to configure! Passware Kit 2023 v1 features group settings for decrypting multiple disk images.

The software groups the disk images by encryption type and allows users to apply the same password recovery or decryption settings to all the images within the same group.

Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.

This option is available for BitLocker, LUKS, and Symantec/PGP WDE. Passware Kit is also capable of setting up the batch password recovery for the specified accounts in multiple disk images where applicable.

Password recovery for AxCrypt

Passware Kit now recovers passwords for files encrypted with AxCrypt v2, for both Free and Premium accounts.

AxCrypt encrypts all the files with a single account password. This means that the password recovery feature for any encrypted file provides access to all the files of the same account, assuming that the account password was not changed by the user.

Instant decryption of the latest VeraCrypt versions via memory analysis

Passware has updated its Windows memory analysis option such that it is now capable of extracting expanded encryption keys required for decrypting the latest versions of VeraCrypt.

Additionally, beginning with version 1.24, VeraCrypt introduces a mechanism to encrypt master keys and cached passwords in RAM. Passware Kit 2023 v1 now supports this feature and decrypts the keys, providing instant access to the VeraCrypt volumes.

Updated Bootable Memory Imager

Passware Bootable Memory Imager now saves memory images in a new format that preserves the RAM layout. This provides additional metadata for the advanced Windows memory image analysis and allows users to instantly decrypt volumes created by the latest versions of VeraCrypt.

GPU acceleration improvements

In some cases, time-consuming password recovery processes lead GPUs to overheat and might even result in hardware damage. High GPU loading provides maximum password recovery speed, but may cause system problems including overheating, system restart, application errors, or stability and usability issues.

Passware Kit now allows users to establish a GPU utilization level and a temperature threshold that disables the GPU automatically if and when it reaches the specified temperature.

Improved Rainbow Tables attack

Rainbow Tables for Office were updated to increase the success decryption rate for MS Excel and Word files to 99.8%.

The Rainbow Tables attack of Passware Kit Forensic and Business editions now features an improved integrity check for the imported tables.

More information about Passware Kit Forensic 2023 v1.

Leave a Comment

Latest Articles