Re: [sleuthkit-users] Examining RAID-5 with only 1 drive

[Simson L. Garfinkel's T. 7. <si...@ac...>]

>I also pointed out in a private e-mail that perhaps you could get  
>information
>off of the parity drive if you already knew the text you were looking  
>for
>and approached the problem from the angle of retrieving a key  
>(missing info)
>when you already have the known text (keyword(s)) and the crypt text
>(parity info) available.


Neat idea, but don't know if the court would go for yoyr cryptanalysis. ... 
 And one would need to show that not other interpretation was possible...
>
>Just depends on how hard you're willing to work for it and whether or
>not you can convince a court that the information really is there.
>
>Or maybe I'm being daft.
>
>- Colby
>