Re: [dm-crypt] Recover luks header / mbr section

[Arno Wagner <arno@wagner.name>]

No, sorry. See FAQ items on data recovery.

Arno


On Fri, Aug 27, 2010 at 10:44:13PM +0200, Saxfusion wrote:
> Hi all,
> 
> i hope someone can help me recover my data.
> 
> I accidentally have written grub to the wrong drive.
> 
> I have attached hex snippets from the drive in question and from another
> encrypted drive. Seems Grub is all over the place.
> 
> Do you see any chance i achieve anything?
> 
> 
> Best regards
> Bernhard

> sudo fdisk -l /dev/sde
> 
> Disk /dev/sde: 2000.4 GB, 2000398934016 bytes
> 174 heads, 63 sectors/track, 356415 cylinders
> Units = cylinders of 10962 * 512 = 5612544 bytes
> Sector size (logical/physical): 512 bytes / 512 bytes
> I/O size (minimum/optimal): 512 bytes / 512 bytes
> Disk identifier: 0xe8070000
> 
>    Device Boot      Start         End      Blocks   Id  System
> /dev/sde1   *           1           1           0   de  Dell Utility
> Partition 1 does not end on cylinder boundary.
> /dev/sde3               1           6       28676+   0  Empty
> Partition 3 does not end on cylinder boundary.
> /dev/sde4               1           1           0   de  Dell Utility
> Partition 4 does not end on cylinder boundary.
> sudo hex /dev/sde | head -n 50
> 0x00000000: eb 63 90 53 ba be 00 01 - 61 65 73 00 00 00 00 00 .c.S??..aes.....
> 0x00000010: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000020: 00 00 00 00 00 00 00 00 - 78 74 73 2d 70 6c 61 69 ........xts-plai
> 0x00000030: 6e 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 n...............
> 0x00000040: 00 00 00 00 00 00 00 00 - 73 68 61 31 00 00 00 00 ........sha1....
> 0x00000050: 00 00 00 00 00 00 00 00 - 00 00 00 80 70 e8 02 00 ............p...
> 0x00000060: 00 00 00 00 ff fa 90 90 - f6 c2 80 75 02 b2 80 ea ........??.u....
> 0x00000070: 74 7c 00 00 31 c0 8e d8 - 8e d0 bc 00 20 fb a0 64 t|..1.?.?... ..d
> 0x00000080: 7c 3c ff 74 02 88 c2 52 - bb 17 04 80 27 03 74 06 |<.t...R....'.t.
> 0x00000090: be 88 7d e8 1c 01 be 05 - 7c f6 c2 80 74 48 b4 41 ..}.....|??.tH.A
> 0x000000a0: bb aa 55 cd 13 5a 52 72 - 3d 81 fb 55 aa 75 37 83 ??U..ZRr=..U.u7.
> 0x000000b0: e1 01 74 32 31 c0 89 44 - 04 40 88 44 ff 89 44 02 ..t21..D.@.D..D.
> 0x000000c0: c7 04 10 00 66 8b 1e 5c - 7c 66 89 5c 08 66 8b 1e ....f..\|f.\.f..
> 0x000000d0: 60 7c 66 89 5c 0c c7 44 - 06 00 70 b4 42 cd 13 72 `|f.\..D..p.B..r
> 0x000000e0: 05 bb 00 70 eb 76 b4 08 - cd 13 73 0d f6 c2 80 0f ...p.v....s.??..
> 0x000000f0: 84 d0 00 be 93 7d e9 82 - 00 66 0f b6 c6 88 64 ff .....}...f.??.d.
> 0x00000100: 40 66 89 44 04 0f b6 d1 - c1 e2 02 88 e8 88 f4 40 @f.D..????.....@
> 0x00000110: 89 44 08 0f b6 c2 c0 e8 - 02 66 89 04 66 a1 60 7c .D..????.f..f.`|
> 0x00000120: 66 09 c0 75 4e 66 a1 5c - 7c 66 31 d2 66 f7 34 88 f..uNf.\|f1.f.4.
> 0x00000130: d1 31 d2 66 f7 74 04 3b - 44 08 7d 37 fe c1 88 c5 .1.f.t.;D.}7??..
> 0x00000140: 30 c0 c1 e8 02 08 c1 88 - d0 5a 88 c6 bb 00 70 8e 0??......Z.??.p?
> 0x00000150: c3 31 db b8 01 02 cd 13 - 72 1e 8c c3 60 1e b9 00 .1??....r...`...
> 0x00000160: 01 8e db 31 f6 bf 00 80 - 8e c6 fc f3 a5 1f 61 ff .?.1??..?.??..a.
> 0x00000170: 26 5a 7c be 8e 7d eb 03 - be 9d 7d e8 34 00 be a2 &Z|..}....}.4.??
> 0x00000180: 7d e8 2e 00 cd 18 eb fe - 47 52 55 42 20 00 47 65 }.....??GRUB .Ge
> 0x00000190: 6f 6d 00 48 61 72 64 20 - 44 69 73 6b 00 52 65 61 om.Hard Disk.Rea
> 0x000001a0: 64 00 20 45 72 72 6f 72 - 0d 0a 00 bb 01 00 b4 0e d. Error........
> 0x000001b0: cd 10 ac 3c 00 75 f4 c3 - 00 00 07 e8 00 00 80 a0 ...?.u??........
> 0x000001c0: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 00 00 ..??............
> 0x000001d0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000001e0: 00 00 00 00 00 00 00 00 - 00 00 09 e0 00 00 00 a0 ................
> 0x000001f0: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 55 aa ..??..........U.
> 0x00000200: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000210: 00 00 00 00 00 00 00 00 - 00 00 0b d8 00 00 0f a0 ................
> 0x00000220: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 00 00 ..??............
> 0x00000230: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000240: 00 00 00 00 00 00 00 00 - 00 00 0d d0 00 00 0f a0 ................
> 0x00000250: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000260: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000270: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000280: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000290: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002a0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002b0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002c0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002d0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002e0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002f0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000300: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000310: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

> sudo fdisk -l /dev/sda
> 
> Disk /dev/sda: 2000.4 GB, 2000398934016 bytes
> 255 heads, 63 sectors/track, 243201 cylinders
> Units = cylinders of 16065 * 512 = 8225280 bytes
> Sector size (logical/physical): 512 bytes / 512 bytes
> I/O size (minimum/optimal): 512 bytes / 512 bytes
> Disk identifier: 0xe8070000
> 
> Disk /dev/sda doesn't contain a valid partition table
> sudo hex /dev/sda | head -n 50
> 0x00000000: 4c 55 4b 53 ba be 00 01 - 61 65 73 00 00 00 00 00 LUKS??..aes.....
> 0x00000010: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000020: 00 00 00 00 00 00 00 00 - 78 74 73 2d 70 6c 61 69 ........xts-plai
> 0x00000030: 6e 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 n...............
> 0x00000040: 00 00 00 00 00 00 00 00 - 73 68 61 31 00 00 00 00 ........sha1....
> 0x00000050: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000060: 00 00 00 00 00 00 00 00 - 00 00 0f c8 00 00 00 40 ...............@
> 0x00000070: b1 59 7e 4e b5 a7 c5 d6 - 72 ac b1 6b a4 cf d2 07 .Y~N????r??k??..
> 0x00000080: 02 d9 95 ad b4 3b b4 c2 - 00 52 0a 2e 60 9e e1 a3 ...??;??.R..`.??
> 0x00000090: 38 ff d7 e9 1e d6 8c 7e - cc d1 45 35 7c 1f 45 12 8.??...~??E5|.E.
> 0x000000a0: 45 78 10 70 00 00 00 0a - 32 65 64 61 63 31 64 63 Ex.p....2edac1dc
> 0x000000b0: 2d 34 31 65 62 2d 34 64 - 37 31 2d 39 38 32 31 2d -41eb-4d71-9821-
> 0x000000c0: 31 63 62 39 33 35 63 39 - 39 62 39 36 00 00 00 00 1cb935c99b96....
> 0x000000d0: 00 ac 71 f3 00 03 11 54 - 9a 86 a5 2c 3e 04 31 ae ..q....T...,>.1.
> 0x000000e0: 37 52 7e 66 a2 cc da 17 - d5 f3 a0 91 ae 7d 3b 76 7R~f??..??...};v
> 0x000000f0: b1 b0 b7 44 76 8d d3 11 - 00 00 00 08 00 00 0f a0 ??.Dv...........
> 0x00000100: 00 ac 71 f3 00 03 17 97 - b8 db 11 3d f5 56 9c c4 ..q.....??.=.V.??
> 0x00000110: c7 f6 31 85 40 c0 82 a9 - af f0 05 68 d0 74 9e 6c ..1.@..??..h.t.l
> 0x00000120: 2d fd 4d 5a 0e 6b c5 1c - 00 00 02 00 00 00 0f a0 -.MZ.k..........
> 0x00000130: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 00 00 ..??............
> 0x00000140: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000150: 00 00 00 00 00 00 00 00 - 00 00 03 f8 00 00 0f a0 ................
> 0x00000160: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 00 00 ..??............
> 0x00000170: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000180: 00 00 00 00 00 00 00 00 - 00 00 05 f0 00 00 0f a0 ................
> 0x00000190: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 00 00 ..??............
> 0x000001a0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000001b0: 00 00 00 00 00 00 00 00 - 00 00 07 e8 00 00 0f a0 ................
> 0x000001c0: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 00 00 ..??............
> 0x000001d0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000001e0: 00 00 00 00 00 00 00 00 - 00 00 09 e0 00 00 0f a0 ................
> 0x000001f0: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 00 00 ..??............
> 0x00000200: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000210: 00 00 00 00 00 00 00 00 - 00 00 0b d8 00 00 0f a0 ................
> 0x00000220: 00 00 de ad 00 00 00 00 - 00 00 00 00 00 00 00 00 ..??............
> 0x00000230: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000240: 00 00 00 00 00 00 00 00 - 00 00 0d d0 00 00 0f a0 ................
> 0x00000250: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000260: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000270: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000280: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000290: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002a0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002b0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002c0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002d0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002e0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x000002f0: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000300: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
> 0x00000310: 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................

> _______________________________________________
> dm-crypt mailing list
> dm-crypt@saout.de
> http://www.saout.de/mailman/listinfo/dm-crypt


-- 
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@wagner.name 
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of 
"news" is "something that hardly ever happens." -- Bruce Schneier