Go to content

CERBERUS

Image: ©CERBERUS

Chain of trust

Data processing has become a real challenge for investigators since electronic devices are almost systematically encrypted. These encrypted devices are widely used especially by anarchists, child abusers, drug dealers and terrorists.

The CERBERUS project aims at handling the complete security chain, starting from the hardware layer, to the system layer, all the way to the application layer. Password cracking becomes feasible only once the multiple cryptographic steps have been identified and understood.

Image: ©CERBERUS

Role of the NFI

CERBERUS is a project by the Forensic Laboratory of the French Gendarmerie (IRCGN), the NFI and University College Dublin. The NFI focuses on two work packages of the CERBERUS project: the first is R&D with the goal to develop both software and hardware so implementing anti-GPU algoritms can be made more efficient (WP 3). The second is building different kinds of password and passphrase dictionaries, with rules and generation algorithms which make it possible to generate password and passphrase dictionaries on a case-by-case basis (WP 4).

Deliverables & synergies

  • R&D on hardware solutions to extend password cracking capabilities
  • Smart dictionaries and rules generation
  • Fundamental research on deleted or temporary contents of social messaging services
  • Regular workshops and conferences with other LEA. These events aim at sharing knowledge and working together on common issues

Password Cracking Platform

  • Creation of a password cracking platform that may be used by any EU LEA for any case.
  • Serving as a first layer of decryption, it is a complementary solution to EC3’s own infrastructure.
  • This platform is guaranteed to function on the long run.
  • Due to the fast-paced evolution of encryption and decryption technologies, this topic will always be an important matter. The platform will thus need to keep evolving with the new technologies and IRCGN will keep working on R&D over time.
  • It will allow investigators to crack passwords used by criminals to protect their data (child pornographic content, banking transactions, etc.) or their communications. Judges will have the capacity to prosecute offenders more effectively by having all evidence at their disposal; evidence that were until then hidden due to strong passwords.

Project duration

The project started on the first of February 2019 for the duration of two years.

Documents