[dm-crypt] Data recovery recomendations needed

Sven Eschenberg sven at whgl.uni-frankfurt.de
Tue Apr 21 22:29:33 CEST 2015


On Tue, April 21, 2015 20:49, Arno Wagner wrote:
> Data recovery people have the sector-checksums the disk does.

They have, and might give you a bad sector list (for a sector copy that
is). Then again, you never know WHAT failure occured - there is a slight
chance of recovering data with coherent checksums that is broken. Not all
failures have physical media damage or completely fried chips ;-).

> For a (potentially very expensive) file-level recovery, you
> just provide the passprase to them, at least the competent ones
> will be able to handle LUKS.

Indeed. File Recovery is usually VERY costly (at least to disk overhaul -
cheapest - and sector copy - medium cost). Usually they will pretty much
offer whatever you want. I.E.: They will take a look at the disk, check if
the LUKS header is intact (or send a recovered copy on demand for the
customer to check it) and will choose to proceed the way the customer
wants.

>
> Arno
>

Regards

-Sven


> On Tue, Apr 21, 2015 at 11:34:56 CEST, Sven Eschenberg wrote:
>> Hio David,
>>
>> Well, if they can not see the files, they can hardly verify the disk and
>> data is readable (well they only can to a limited extent).
>>
>> Anyway, I remember that i.e. Kroll Ontrack DID offer quite a variety of
>> options back in the days. They would either send the 'repaired' drive
>> back
>> but without any guarantee on how long it might be working outside their
>> lab or they would offer a sector by sector copy of what the disk spits
>> out. There's no guarantee whatsoever that sectors are not corrupted
>> (obviously).
>>
>> Regards
>>
>> -Sven
>>
>> On Tue, April 21, 2015 06:38, David Backer wrote:
>> > My question was, How do I get data off the broken drive
>> > if the data recovery people will not take it because it has
>> > encryption?
>> > Do you know of any that would?
>> > Even if they just copied off the raw sectors, I could use
>> > them to recover the data if I moved it to a new drive
>> > provided that the LVM info and the LUKS headers are intact
>> > right?
>> >
>> > Thanks again, David
>> >
>>
>>
>> _______________________________________________
>> dm-crypt mailing list
>> dm-crypt at saout.de
>> http://www.saout.de/mailman/listinfo/dm-crypt
>
> --
> Arno Wagner,     Dr. sc. techn., Dipl. Inform.,    Email: arno at wagner.name
> GnuPG: ID: CB5D9718  FP: 12D6 C03B 1B30 33BB 13CF  B774 E35C 5FA1 CB5D
> 9718
> ----
> A good decision is based on knowledge and not on numbers. -- Plato
>
> If it's in the news, don't worry about it.  The very definition of
> "news" is "something that hardly ever happens." -- Bruce Schneier
> _______________________________________________
> dm-crypt mailing list
> dm-crypt at saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt
>




More information about the dm-crypt mailing list