A Fast Recovery of Encrypted Message Database of WeChat On GPU

WeChat is one of the most popular instant-messaging applications in the world. The recovery of WeChat's encrypted local database is concerned by forensic community. This paper studies a fast recovery method in a special situation that we only have the encrypted database without any helpful information. The new method uses a fast implementation of pbkdf2 function which is two times faster than before. The new method could successfully recover the database in about 30 seconds on our GPU system, while the previous method will take about 10 days on a desktop CPU.