Computer Forensics JumpStart, Second Edition

Encryption Basics

After they gain access to the file that contain needed evidence, forensic investigators may well find that the file itself is unreadable. As computer investigators begin to use more sophisticated tools, both regular and malicious users are taking more sophisticated steps to hide information. One method used to hide information is to modify a message or file in such a way that only the intended recipient can reconstruct the original.

This chapter does not cover the mathematics behind encryption in any detail (such a discussion is beyond the scope of this book).

cryptography

The science of hiding the true contents of a message ...