[dm-crypt] Data recovery recomendations needed

Sitaram Chamarty sitaramc at gmail.com
Tue Apr 21 07:16:20 CEST 2015

On 04/21/2015 10:08 AM, David Backer wrote:

> Even if they just copied off the raw sectors, I could use
> them to recover the data if I moved it to a new drive
> provided that the LVM info and the LUKS headers are intact
> right?

This may be very naive of me, but it seems to me you need to do it in 3

-   get the raw data off (maybe DIY using 'ddrescue' or some such
    program, or farm it out).

-   assuming the LUKS headers etc are ok, mount the rescued data as a
    "drive" (or figure out some way of applying the same decryption that
    dm-crypt's block-by-block enc/dec does).  Read off the raw blocks,
    this time unencrypted, and write them to another device.

-   use that device to recover the actual data.  This is where knowledge
    of the internals of your filesystem will be needed, and you will
    probably need to farm it out.  I'm assuming that's why those
    specialists exist.

More information about the dm-crypt mailing list