UNITED STATES NEWS

‘Cold’: FBI, Secret Service failed to crack Josh Powell’s encryption

Jan 31, 2019, 11:00 AM
This still frame image from one of Steve Powell's home videos shows his oldest son, Josh Powell, si...
This still frame image from one of Steve Powell's home videos shows his oldest son, Josh Powell, sitting at his computer in 2003. Josh Powell's use of encryption on his personal files continues to frustrate police investigating the Dec. 7, 2009, disappearance of Josh Powell's wife, Susan Powell. (Caption: West Valley Police Department)
(Caption: West Valley Police Department)

Editor’s note: This is the 12th of a weekly series featuring highlights from a KSL investigative podcast series titled “Cold” that reports new information about the case of missing Utah woman Susan Powell.

WEST VALLEY CITY — An off-the-shelf computer hard drive seized from the basement office of Josh and Susan Powell’s home the day after her disappearance continues to frustrate police more than nine years later.

Warrants filed in the case as far back as Dec. 8, 2009, show police believe the drive could hold evidence related to Susan Powell’s disappearance the day before.

The Western Digital-brand “My Book World Edition” external drive, 1 terabyte in capacity, is locked with encryption. All efforts to crack that encryption have so far failed.

West Valley police suspect this Western Digital external hard drive seized from Josh and Susan Powell’s home on Dec. 8, 2009, might hold evidence related to Susan Powell’s unsolved disappearance. The drive was encrypted and has resisted all efforts to circumvent that encryption. (Photo: West Valley City, Utah police)

The first stop for that hard drive after police took it from the Powell home with a search warrant was the Intermountain West Regional Computer Forensics Laboratory in Salt Lake City.

FBI supervisory special agent Cheney Eng-Tow said the laboratory’s digital forensic experts worked with West Valley police detectives. They produced an exact copy of the drive, called a mirror. Then they attempted to extract information from the mirror using specialized software called a forensic tool kit.

That failed because the drive had been encrypted. Agents tried several methods of circumventing the encryption, from guessing potential passwords to attempting a “brute force” attack.

“You’re just trying combinations from the dictionary, combinations of letters, alpha-numeric characters, and so the longer that password is, the longer it’s going to be before you can break it,” Eng-Tow said.

While serving a search warrant at the South Hill, Wash., home of Steve Powell on Aug. 25, 2011, police looked for any writings that appeared to hold possible passwords. Those potential passwords were entered into Josh Powell’s encrypted digital media, in the hopes of getting past encryption. (Photo: West Valley City, Utah police)

Laboratory analysts also attempted more human approaches, such as using children’s names or birthdates.

“We do break encryption here on cases. Sometimes we’re successful doing it, other times we’re not,” Eng-Tow said. “FBI headquarters has a unit basically that can try and do that as well.”

FBI

On June 22, 2010, 3rd District Judge Robert Hilder signed a warrant allowing the forensics laboratory to send three encrypted devices, including the mirror of that Western Digital hard drive, to FBI headquarters in Quantico, Virginia.

West Valley police asked for court permission in 2010 to provide Josh Powell’s encrypted digital media to FBI headquarters in Quantico, Va. After more than a year, the FBI reported that it was unable to access the devices. (Photo: West Valley City, Utah police)

After more than a year, FBI headquarters returned the drives to Utah. The bureau had been unable to access them.

Case records show West Valley police also requested help from AccessData, the Utah-based software vendor that produced the forensic tool kit program used by the FBI, as well as the U.S. Secret Service.

The city submitted a mirror to the federal agency but in May 2011, the Secret Service reported that it was also unable to crack the encryption.

Decipher forensics

A secrecy order prevented police from discussing the case or their evidence until May 2013, when the Susan Powell case officially became “cold.” By that point, Josh Powell and his brother Michael Powell, who police suspected had knowledge of Susan Powell’s death, had both committed suicide.

In October of 2013, after a judge had lifted that secrecy order, Susan Powell’s father Chuck Cox suggested that police submit a mirror to a Utah company called Decipher Forensics. The lead detective on the Powell case, Ellis Maxwell, spoke with Trent Leavitt from Decipher the following month.

“I explained to Trent that Josh Powell admitted he used a 24 character password … when we seized further digital media,” Maxwell wrote in a later report. “At that time in 2011, Josh admitted and provided one password that was potentially 56 characters long.”

This still frame image from one of Steve Powell’s home videos shows his oldest son, Josh Powell, sitting at his computer in 2003. Josh Powell’s use of encryption on his personal files continues to frustrate police investigating the Dec. 7, 2009, disappearance of Josh Powell’s wife, Susan Powell. (Caption: West Valley Police Department)

Maxwell provided a mirror to Decipher Forensics in December of 2013. Four years later, Decipher had still not succeeded in cracking the drive. Police records revealed Decipher requested and received access to mirrors of all the other computer drives seized from the Powell home in 2009, along with the FBI’s analysis and other case documents.

At that time in 2017, investigators reminded Decipher staff they were prohibited from discussing their efforts under a non-disclosure agreement.

Case files also indicate that on Jan. 4, 2018, police provided yet another mirror of the encrypted drive to a computer systems security expert with Intermountain Healthcare. An IHC spokesman said that employee volunteered his expertise as a private individual and the device in question never entered an Intermountain facility.

Complex password

The most simple solution would have been for Josh Powell to voluntarily provide his password to police. They requested he do so multiple times, but he frequently claimed to have forgotten it.

Because the entire volume is encrypted, there’s no way to know how much data it actually holds or if any of its contents are relevant to the case. Many of Susan Powell’s friends and family members suspect the drive might be the last, best chance of learning what happened to her.

“It’s good maybe to be optimistic like that, but in the end there could be nothing on it of value,” Eng-Tow said. “Is there something on there that is incriminating or not? You’ll never know until you actually get into it and see it.”

Lifetime Windows & Doors

United States News

Associated Press

Police: 2 killed, 10 injured in three-car crash in Texas

UVALDE, TEXAS (AP) — A road accident in Texas Wednesday evening killed two people and left 10 injured, police said. Authorities in Uvalde said the accident occurred around 6:30 p.m. on Highway 90 near the downtown area of Uvalde, KSAT-TV reported. Border Patrol agents reportedly saw a black truck speeding on the highway before crashing […]
1 day ago
A King Point resident looks through her broken window as a man boards up another broken window from...
Associated Press

People trapped, hospital damaged after Ian swamps SW Florida

ST. PETERSBURG, Fla. (AP) — Hurricane Ian left a path of destruction in southwest Florida, trapping people in flooded homes, damaging the roof of a hospital intensive care unit and knocking out power to 2 million people before aiming for the Atlantic Coast. One of the strongest hurricanes to ever hit the United States barreled […]
1 day ago
A currency trader watches monitors at the foreign exchange dealing room of the KEB Hana Bank headqu...
Associated Press

Asian stocks follow Wall St higher after UK calms markets

BEIJING (AP) — Asian stock markets followed Wall Street higher Thursday after Britain’s central bank moved forcefully to stop a budding financial crisis. Market benchmarks in Hong Kong, Seoul and Sydney added more than 1%. Shanghai and Tokyo also rose. Oil prices edged lower after jumping by more than $3 per barrel the previous day. […]
1 day ago
FILE - In this image from video, defense attorney Eric Nelson, and defendant, former Minneapolis po...
Associated Press

In Minnesota, abortion keys Keith Ellison’s 2nd term hopes

MINNEAPOLIS (AP) — Keith Ellison gave up a safe seat in Congress to run for Minnesota attorney general, saying it was his best chance to push back against the policies of Donald Trump. Now locked in a tough reelection fight, he’s arguing that he’s been far less of a partisan warrior than his critics claim. […]
1 day ago
Associated Press

Today in History: September 29, Pope John Paul I found dead

Today in History Today is Thursday, Sept. 29, the 272nd day of 2022. There are 93 days left in the year. Today’s Highlight in History: On Sept. 29, 1938, British, French, German and Italian leaders concluded the Munich Agreement, which was aimed at appeasing Adolf Hitler by allowing Nazi annexation of Czechoslovakia’s Sudetenland. On this […]
1 day ago
Associated Press

Chinese tycoon Richard Liu faces civil trial in alleged rape

MINNEAPOLIS (AP) — A Chinese billionaire, one of the richest people in the world, is heading to trial in Minneapolis to defend himself against allegations that he raped a former University of Minnesota student after a night of dinner and drinks in 2018. Richard Liu, the founder and former CEO of e-commerce giant JD.com, has […]
1 day ago

Sponsored Articles

...
Day & Night Air Conditioning, Heating and Plumbing

Ways to prevent clogged drains and what to do if you’re too late

While there are a variety of ways to prevent clogged drains, it's equally as important to know what to do when you're already too late.
...
Sanderson Ford

Don’t let rising fuel prices stop you from traveling Arizona this summer

There's no better time to get out on the open road and see what the beautiful state of Arizona has to offer. But if the cost of gas is putting a cloud over your summer vacation plans, let Sanderson Ford help with their wide-range selection of electric vehicles.
(Courtesy Condor)...
Condor Airlines

Condor Airlines shows passion for destinations from Sky Harbor with new-look aircraft

Condor Airlines brings passion to each flight and connects people to their dream destinations throughout the world.
‘Cold’: FBI, Secret Service failed to crack Josh Powell’s encryption