[prev in list] [next in list] [prev in thread] [next in thread] 

List:       dm-crypt
Subject:    Re: [dm-crypt] Data recovery recomendations needed
From:       Sitaram Chamarty <sitaramc () gmail ! com>
Date:       2015-04-21 5:28:20
Message-ID: 5535DD24.9040609 () gmail ! com
[Download RAW message or body]

On 04/21/2015 10:08 AM, David Backer wrote:

> Even if they just copied off the raw sectors, I could use
> them to recover the data if I moved it to a new drive
> provided that the LVM info and the LUKS headers are intact
> right?

This may be very naive of me, but it seems to me you need to do it in 3
steps:

-   get the raw data off (maybe DIY using 'ddrescue' or some such
    program, or farm it out).

-   assuming the LUKS headers etc are ok, mount the rescued data as a
    "drive" (or figure out some way of applying the same decryption that
    dm-crypt's block-by-block enc/dec does).  Read off the raw blocks,
    this time unencrypted, and write them to another device.

-   use that device to recover the actual data.  This is where knowledge
    of the internals of your filesystem will be needed, and you will
    probably need to farm it out.  I'm assuming that's why those
    specialists exist.

_______________________________________________
dm-crypt mailing list
dm-crypt@saout.de
http://www.saout.de/mailman/listinfo/dm-crypt
[prev in list] [next in list] [prev in thread] [next in thread]