{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:27:23Z","timestamp":1750220843371,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":21,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,10,22]],"date-time":"2019-10-22T00:00:00Z","timestamp":1571702400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,10,22]]},"DOI":"10.1145\/3331453.3361328","type":"proceedings-article","created":{"date-parts":[[2019,10,21]],"date-time":"2019-10-21T13:34:22Z","timestamp":1571664862000},"page":"1-6","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["An Extensive Analysis of TrueCrypt Encryption Forensics"],"prefix":"10.1145","author":[{"given":"Lijun","family":"Zhang","sequence":"first","affiliation":[{"name":"Science and Technology on Communication Security Laboratory, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaoyan","family":"Deng","sequence":"additional","affiliation":[{"name":"Chengdu University of Information Technology, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Cheng","family":"Tan","sequence":"additional","affiliation":[{"name":"Science and Technology on Communication Security Laboratory, Chengdu, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2019,10,22]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"FBI hackers fail to crack TrueCrypt, https:\/\/www.techworld.com\/news\/security\/fbi-hackers-fail-to-crack-truecrypt-3228701\/","author":"John E","year":"2010","unstructured":"John E Dunn ( 2010 ). FBI hackers fail to crack TrueCrypt, https:\/\/www.techworld.com\/news\/security\/fbi-hackers-fail-to-crack-truecrypt-3228701\/ John E Dunn (2010). FBI hackers fail to crack TrueCrypt, https:\/\/www.techworld.com\/news\/security\/fbi-hackers-fail-to-crack-truecrypt-3228701\/"},{"key":"e_1_3_2_1_2_1","volume-title":"License agreement for Encryption for the Masses. https:\/\/en.wikipedia.org\/wiki\/E4M","author":"Paul Le Roux","year":"2014","unstructured":"Paul Le Roux ( 2014 ). License agreement for Encryption for the Masses. https:\/\/en.wikipedia.org\/wiki\/E4M Paul Le Roux (2014). License agreement for Encryption for the Masses. https:\/\/en.wikipedia.org\/wiki\/E4M"},{"key":"e_1_3_2_1_3_1","volume-title":"TrueCrypt the final release archive. https:\/\/www.grc.com\/misc\/truecrypt\/truecrypt.htm","author":"Gibson Steve","year":"2019","unstructured":"Gibson Steve ( 2019 ). TrueCrypt the final release archive. https:\/\/www.grc.com\/misc\/truecrypt\/truecrypt.htm Gibson Steve (2019). TrueCrypt the final release archive. https:\/\/www.grc.com\/misc\/truecrypt\/truecrypt.htm"},{"key":"e_1_3_2_1_4_1","volume-title":"plausible deniability in Truecrypt users' guide. https:\/\/www.grc.com\/misc\/truecrypt\/TrueCrypt%20User%20Guide.pdf","author":"Truecrypt","year":"2019","unstructured":"Truecrypt team ( 2019 ). plausible deniability in Truecrypt users' guide. https:\/\/www.grc.com\/misc\/truecrypt\/TrueCrypt%20User%20Guide.pdf Truecrypt team (2019). plausible deniability in Truecrypt users' guide. https:\/\/www.grc.com\/misc\/truecrypt\/TrueCrypt%20User%20Guide.pdf"},{"key":"e_1_3_2_1_5_1","volume-title":"Using TrueCrypt is not secure as it may contain unfixed security issues","author":"Truecrypt","year":"2014","unstructured":"Truecrypt team ( 2014 ). Using TrueCrypt is not secure as it may contain unfixed security issues . http:\/\/truecrypt.sourceforge.net Truecrypt team (2014). Using TrueCrypt is not secure as it may contain unfixed security issues. http:\/\/truecrypt.sourceforge.net"},{"key":"e_1_3_2_1_6_1","volume-title":"Open Crypt Audit Project Truecrypt Cryptographic Review. https:\/\/opencryptoaudit.org\/reports\/ TrueCry-pt_Phase_II_NCC_OCAP_final.pdf","author":"Alex Balducci","year":"2015","unstructured":"Alex Balducci , Sean Devlin, Tom Ritter ( 2015 ). Open Crypt Audit Project Truecrypt Cryptographic Review. https:\/\/opencryptoaudit.org\/reports\/ TrueCry-pt_Phase_II_NCC_OCAP_final.pdf , 2015.3. Alex Balducci, Sean Devlin, Tom Ritter (2015). Open Crypt Audit Project Truecrypt Cryptographic Review. https:\/\/opencryptoaudit.org\/reports\/ TrueCry-pt_Phase_II_NCC_OCAP_final.pdf, 2015.3."},{"unstructured":"Forshaw (2015). Truecrypt 7 Derived Code\/Windows: Drive Letter Symbolic Link Creation EoP. https:\/\/bugs.chromium.org\/p\/project-zero\/issues\/detail? id=538&can=1&q=truecrypt&colspec=ID%20Status%20Restrict%20Reported%20Vendor%20Product%20Finder%20Summary  Forshaw (2015). Truecrypt 7 Derived Code\/Windows: Drive Letter Symbolic Link Creation EoP. https:\/\/bugs.chromium.org\/p\/project-zero\/issues\/detail? id=538&can=1&q=truecrypt&colspec=ID%20Status%20Restrict%20Reported%20Vendor%20Product%20Finder%20Summary","key":"e_1_3_2_1_7_1"},{"unstructured":"Forshaw (2015). Truecrypt 7 Derived Code\/Windows: Incorrect Impersona-tion Token Handling EoP. https:\/\/bugs.chromium.org\/p\/project-zero\/issues\/detail? id=537&can=1&q=truecrypt&colspec=ID%20Status%20Restrict%20Reported%20Vendor%20Product%20Finder%20Summary 2015.09.  Forshaw (2015). Truecrypt 7 Derived Code\/Windows: Incorrect Impersona-tion Token Handling EoP. https:\/\/bugs.chromium.org\/p\/project-zero\/issues\/detail? id=537&can=1&q=truecrypt&colspec=ID%20Status%20Restrict%20Reported%20Vendor%20Product%20Finder%20Summary 2015.09.","key":"e_1_3_2_1_8_1"},{"key":"e_1_3_2_1_9_1","volume-title":"Yes...TrueCrypt is still safe to use. https:\/\/www.grc.com\/ misc\/truecrypt\/truecrypt.htm","author":"Gibson Steve","year":"2019","unstructured":"Gibson Steve ( 2019 ). Yes...TrueCrypt is still safe to use. https:\/\/www.grc.com\/ misc\/truecrypt\/truecrypt.htm Gibson Steve (2019). Yes...TrueCrypt is still safe to use. https:\/\/www.grc.com\/ misc\/truecrypt\/truecrypt.htm"},{"key":"e_1_3_2_1_10_1","volume-title":"Passware Kit Enterprise and Passware Kit Forensic","author":"Passware","year":"2019","unstructured":"Passware company ( 2019 ). Passware Kit Enterprise and Passware Kit Forensic . http:\/\/www.lostpassword.com\/index.htm Passware company (2019). Passware Kit Enterprise and Passware Kit Forensic. http:\/\/www.lostpassword.com\/index.htm"},{"key":"e_1_3_2_1_11_1","volume-title":"Disk decryptor Forensic","author":"Elcomsoft","year":"2019","unstructured":"Elcomsoft company ( 2019 ). Disk decryptor Forensic . http:\/\/www.elcomsoft.com Elcomsoft company (2019). Disk decryptor Forensic. http:\/\/www.elcomsoft.com"},{"key":"e_1_3_2_1_12_1","series-title":"Royal Holloway Information Security Thesis Series.","volume-title":"Forensic investigations: Detecting evidence of the use of TrueCrypt","author":"Andrew Davies","unstructured":"Andrew Davies , Allan Tomlinson. 2014. Forensic investigations: Detecting evidence of the use of TrueCrypt , Royal Holloway Information Security Thesis Series. Andrew Davies, Allan Tomlinson. 2014. Forensic investigations: Detecting evidence of the use of TrueCrypt, Royal Holloway Information Security Thesis Series."},{"key":"e_1_3_2_1_13_1","first-page":"233","volume-title":"Austria","author":"Christopher Hargreaves","year":"2010","unstructured":"Christopher Hargreaves , Howard Chivers ( 2010 ). Detecting Hidden Encrypted Volumes. The 11 International Conference on Communications and Multimedia Security (CMS) , Austria . Springer , Lecture Notes in Computer Science, LNCS-6109, pp. 233 -- 244 . Christopher Hargreaves, Howard Chivers (2010). Detecting Hidden Encrypted Volumes. The 11 International Conference on Communications and Multimedia Security (CMS), Austria. Springer, Lecture Notes in Computer Science, LNCS-6109, pp. 233--244."},{"key":"e_1_3_2_1_14_1","volume-title":"TCHunt Search for TrueCrypt Volumes. https:\/\/www.ghacks.net\/2011\/04\/11\/tchunt-search-for-truecrypt-volumes","author":"Martin Brinkmann","year":"2014","unstructured":"Martin Brinkmann ( 2014 ). TCHunt Search for TrueCrypt Volumes. https:\/\/www.ghacks.net\/2011\/04\/11\/tchunt-search-for-truecrypt-volumes Martin Brinkmann (2014). TCHunt Search for TrueCrypt Volumes. https:\/\/www.ghacks.net\/2011\/04\/11\/tchunt-search-for-truecrypt-volumes"},{"key":"e_1_3_2_1_15_1","volume-title":"Security analysis of TrueCrypt 7.0a with an attack on the keyfile algorithm. Technical report. https:\/\/www.privacy-cd.org\/downloads\/truecrypt_7.0a-analysis-en.pdf","author":"Ubuntu Privacy Remix Team","year":"2011","unstructured":"Ubuntu Privacy Remix Team ( 2011 ). Security analysis of TrueCrypt 7.0a with an attack on the keyfile algorithm. Technical report. https:\/\/www.privacy-cd.org\/downloads\/truecrypt_7.0a-analysis-en.pdf Ubuntu Privacy Remix Team (2011). Security analysis of TrueCrypt 7.0a with an attack on the keyfile algorithm. Technical report. https:\/\/www.privacy-cd.org\/downloads\/truecrypt_7.0a-analysis-en.pdf"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_16_1","DOI":"10.1109\/PIC.2014.6972366"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_17_1","DOI":"10.1007\/978-3-540-30539-2_2"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_18_1","DOI":"10.6028\/NIST.SP.800-38e"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_19_1","DOI":"10.1145\/2976749.2978339"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_20_1","DOI":"10.1109\/SP.2014.50"},{"doi-asserted-by":"publisher","key":"e_1_3_2_1_21_1","DOI":"10.1109\/SP.2009.8"}],"event":{"acronym":"CSAE 2019","name":"CSAE 2019: The 3rd International Conference on Computer Science and Application Engineering","location":"Sanya China"},"container-title":["Proceedings of the 3rd International Conference on Computer Science and Application Engineering"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3331453.3361328","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3331453.3361328","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:22:56Z","timestamp":1750202576000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3331453.3361328"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,10,22]]},"references-count":21,"alternative-id":["10.1145\/3331453.3361328","10.1145\/3331453"],"URL":"https:\/\/doi.org\/10.1145\/3331453.3361328","relation":{},"subject":[],"published":{"date-parts":[[2019,10,22]]},"assertion":[{"value":"2019-10-22","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}