From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from v1.tansi.org (mail.tansi.org [84.19.178.47]) by mail.server123.net (Postfix) with ESMTP for ; Fri, 19 Aug 2016 13:58:42 +0200 (CEST) Received: from gatewagner.dyndns.org (77-56-144-126.dclient.hispeed.ch [77.56.144.126]) by v1.tansi.org (Postfix) with ESMTPA id D5FB114006C for ; Fri, 19 Aug 2016 13:58:40 +0200 (CEST) Date: Fri, 19 Aug 2016 13:58:41 +0200 From: Arno Wagner Message-ID: <20160819115841.GA8705@tansi.org> References: <874579112.14972576.1471597033535.JavaMail.yahoo.ref@mail.yahoo.com> <874579112.14972576.1471597033535.JavaMail.yahoo@mail.yahoo.com> <830443834.15018837.1471607121907.JavaMail.yahoo@mail.yahoo.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <830443834.15018837.1471607121907.JavaMail.yahoo@mail.yahoo.com> Subject: Re: [dm-crypt] LUKS encrypted hard disk crashed. Recovery question List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de Hi Saibal, On Fri, Aug 19, 2016 at 13:45:21 CEST, Saibal Kumar Adhya wrote: > [saibal] Thanks a lot Michael. > > If you are able to somehow gain access to the key slots in the LUKS > > header, it should be possible to decrypt the (stored) payload data, > to > > the extent that the data recovery agency was able to recover the > data. > > What they were not able to recover will decrypt to nonsense. > > [saibal] I have couple of following question. > > 1) Is there a way to know, if the key slot area in the LUKS header has > been recovered or not? How to recover the entire partition from there? Try a LuksOpen. It does not care about filesystem damage, but it will obnly work if header and keyslot are undamaged. > 2) This question is for my information. As I understand, LUKS header > and "key-slot" are very very critical. So, if any of these sectors get > damaged then the entire partition is un-usable. Is there a backup copy > of LUKS header and key slots, kept within the partition itself? > Thanks in advance. No. You have to do such a backup yourself. See most of FAQ Section 6: https://gitlab.com/cryptsetup/cryptsetup/wikis/FrequentlyAskedQuestions Regards, Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., Email: arno@wagner.name GnuPG: ID: CB5D9718 FP: 12D6 C03B 1B30 33BB 13CF B774 E35C 5FA1 CB5D 9718 ---- A good decision is based on knowledge and not on numbers. -- Plato If it's in the news, don't worry about it. The very definition of "news" is "something that hardly ever happens." -- Bruce Schneier