Decryption problem

[Anonymous 0]

Guys,

I need help with recent issue: I accidentally lost access to my encrypted drive.

For some reason after plug-in, system started to format disk (not deeply, for ~ 10 seconds), consequently DiskCryptor cannot load volume, even though I have password.

I recovered encrypted data with Stellar Phoenix Windows Data Recovery; right now I’m copying it on another disk.

The questions are:

1) Can I decrypt copied data, having original key and original DiskCryptor?
2) If yes, what methods of access regain could be used in this situation?
3) What programs should I use in order to regain access to my disk?

I would really appreciate your help with this issue.

[wyrParticipant 591]

I’ve never seen your situation, but I would look into partition recovery software. Hopefully, only the partition table got overwritten and all your data is still there.

Make multiple backups before you try anything!

I’ve found frequent backups, to a few different hard drives, worth the trouble.

Good luck bother!

Self-improvement is my religion. Sovereignty is my god.

[SolidParticipant 7520]

Encryption software uses a “masterkey”, a key that is encrypted using your password.
Since if someone with the same password would generate some predictable bytes, it is avoided by using a key like that.
This also allows you to change your password without having to re encrypt the whole drive.
If you lost this key, even with your password, you are doomed.
Take a look at the low level how your tool works, if you have one or multiple keys, if you can partially recover something in a case like that.
You will have to open a ticket on the website that sold you that tool, or contact their support team.

I would recommend from now on, using veracrypt, luks or filevault (if you are using apple).
They are more transparent about how to handle this kind of situations.

[Anonymous 0]

wyr wrote:

I’ve never seen your situation, but I would look into partition recovery software. Hopefully, only the partition table got overwritten and all your data is still there.

Make multiple backups before you try anything!

I’ve found frequent backups, to a few different hard drives, worth the trouble.

Good luck bother!

Thank you, Wyr! I made at least one at this moment.
I’m not going to interfere with data on encrypted drive.

Are there any Elcomsoft Forensic Disk Decryptor alike soft, designed to work with DiskCryptor?

I’ve tried earlier one, but to no avail, ’cause it’s designed mainly for TrueCrypt and BitDefender.

Any related advices, guys?

[Anonymous 0]

Solid wrote:

Encryption software uses a “masterkey”, a key that is encrypted using your password.
Since if someone with the same password would generate some predictable bytes, it is avoided by using a key like that.
This also allows you to change your password without having to re encrypt the whole drive.
If you lost this key, even with your password, you are doomed.
Take a look at the low level how your tool works, if you have one or multiple keys, if you can partially recover something in a case like that.
You will have to open a ticket on the website that sold you that tool, or contact their support team.

I would recommend from now on, using veracrypt, luks or filevault (if you are using apple).
They are more transparent about how to handle this kind of situations.

Thank you for advice, Solid.

It’s very probable, that master key had been wiped during those 10-15 second of accidental formatting.

Maybe there is another one, stored somewhere on encrypted disk, maybe it’s stored in another partition, but I’m not sure about these ones. I assume that master key isn’t stored somewhere in PC restore points, hibernation files, etc. Is it true?

Speaking of disk, it’s Toshiba. As far as I remember, I’ve saved a bill for disk, so probably it would be easier to create a ticket.
Thank you for info about alternatives. Definitely, I’ll change DiskCryptor on something more reliable.

[Anonymous 0]

Guys,

Right now I want to create several exact copies of encrypted disk. Previous ones were not of satisfying quality.
What software would you advice to use for this task?

[Author]

Posts