decrypt files and not image file?

[silkyclouds]

Hi there,

I finally got all fixed and reallymine is now decrypting my drive !!! tjank you so much !

One question remains, is there any way to just put all the files just like they were on another hard drive ?
I prefer to "simply" copy the folders and files without creating an .img file. Is that possible ?

thanks !!

[MrDecay]

Decrypting under windows?

Afaik it has to output to an image.

But I think somebody did something with a program called cryptab .it was
mentioned in early issues

On Nov 10, 2016 9:22 AM, "silkyclouds" notifications@github.com wrote:

Hi there,

I finally got all fixed and reallymine is now decrypting my drive !!!
tjank you so much !

One question remains, is there any way to just put all the files just like
they were on another hard drive ?
I prefer to "simply" copy the folders and files without creating an .img
file. Is that possible ?

thanks !!

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#20, or mute the thread
https://github.com/notifications/unsubscribe-auth/AQE6xdIl6yHiDPZ1EDC9LYuRP2U-3TrPks5q8zZ3gaJpZM4Kux6h
.

[andlabs]

No, reallymine does not know anything about partitions or filesystems, so it cannot extract files. Sorry.

[themaddoctor]

It can be done on linux, using cryptsetup with the key that reallymine extracts.
Feel free to contact me at thomas dot a dot kaeding at gmail dot com if you want
to try it.

[MrDecay]

Cool. That would be interesting to be able to mount an encrypted image. Do you have a PDF or a blog about it

…

On Feb 4, 2017 10:23 AM, "themaddoctor" ***@***.***> wrote: It can be done on linux, using cryptsetup with the key that reallymine extracts. Feel free to contact me at thomas dot a dot kaeding at gmail dot com if you want to try it. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#20 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AQE6xcgrfuEYHQCJAyavIkAlehrjLoIGks5rZKYFgaJpZM4Kux6h> .

[themaddoctor]

No. So far I have succeeded with the Jmicron and Symwave chips.
There is a PDF mentioned in notes/story.md in the reallymine code
that is very helpful, but it doesn't include anything about the linux part.
Something like this works for the Symwave chip:
echo 2850018b293e7af277eb8b6d7aabb7060ccddf0392a312e600eb76cc5560af3b |
xxd -p -r | sudo cryptsetup -c aes-ecb --key-size=256 -d - --hash=plain
create wd /dev/sdb
But for the Jmicro chip, I needed to handle the reversal of each block of 16 bytes
by creating a new encryption module.
After 'cryptsetup', you can use 'kpartx' to detect the partitions, and 'mount' to mount them.

If you are willing to run linux (even if only temporarily) and email me the first 2MB and
the last 2MB of your drive image, I may be able to send you commands specific to your
situation. (I say "may" because I'm about 80% sure.)

[andlabs]

And what is this cryptsetup?

[themaddoctor]

cryptsetup is specific to linux. It allows you to set up an en/decryption layer with another program called device mapper. It creates a new device that can be mounted, formatted, etc. just like a normal hard drive.
I'm attaching a PDF that I wrote just now. The JMicron and Symwave parts are there, but the Initio and PLX parts are waiting for data to test.
Mounting encrypted WD disks in linux.pdf

[athomic1]

If I might make a suggestion, it might be good to include hexadecimal equivalents in your key location tables. While not everyone might need them, I feel they do help reveal the logic or pattern by which those locations are determined. I'm all but certain there IS some logic going on, there, though I don't have the resources to pursue it myself.

[themaddoctor]

In the next revision. Do you have any initio or plx samples that I can play with?

[athomic1]

I'm afraid I don't. All I've got is the one drive I was recovering. I don't expect to run into any others, but if I do, I'll see what I can do about that.

[cardonator]

I noticed the PDF here has instructions for the JMS528S but my board was a JMS538S. Will the same instructions apply?

[andlabs]

They should; see if reallymine gets a DEK out with getdek to confirm.

[themaddoctor]

Sorry, that was a typo. The PDF should have said "JMS538S"

[themaddoctor]

Mounting encrypted WD disks in linux.pdf

[athomic1]

Looks pretty good! I take it from all those strikeouts that the PLX version still needs a lot of work?