From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <miklos.bagi@mbjr.hu>
Received: from mail.bgds.hu (mail.basz.hu [217.27.219.43])
 by mail.saout.de (Postfix) with ESMTP
 for <dm-crypt@saout.de>; Thu,  2 Dec 2010 13:14:40 +0100 (CET)
Received: from localhost (sausage.mbjr.hu [127.0.0.1])
 by mail.mbjr.hu (Postfix) with ESMTP id 58DD245402D
 for <dm-crypt@saout.de>; Thu,  2 Dec 2010 13:35:04 +0100 (CET)
Received: from mail.bgds.hu ([127.0.0.1])
 by localhost (mail.mbjr.hu [127.0.0.1]) (amavisd-new, port 10024)
 with LMTP id X0YZf9qL3zaH for <dm-crypt@saout.de>;
 Thu,  2 Dec 2010 13:35:02 +0100 (CET)
Received: from [192.168.56.11] (catv-80-98-232-58.catv.broadband.hu
 [80.98.232.58])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 by mail.bgds.hu (Postfix) with ESMTP id B9F16454028
 for <dm-crypt@saout.de>; Thu,  2 Dec 2010 13:35:02 +0100 (CET)
Message-ID: <4CF78DF8.1000102@mbjr.hu>
Date: Thu, 02 Dec 2010 13:15:52 +0100
From: Miklos Bagi <miklos.bagi@mbjr.hu>
MIME-Version: 1.0
References: <4CF774C3.2020904@mbjr.hu>
In-Reply-To: <4CF774C3.2020904@mbjr.hu>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Subject: Re: [dm-crypt] Is partial LUKS recovery possible?
List-Id: <dm-crypt.saout.de>
List-Unsubscribe: <http://www.saout.de/mailman/options/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=unsubscribe>
List-Archive: <http://www.saout.de/pipermail/dm-crypt>
List-Post: <mailto:dm-crypt@saout.de>
List-Help: <mailto:dm-crypt-request@saout.de?subject=help>
List-Subscribe: <http://www.saout.de/mailman/listinfo/dm-crypt>,
 <mailto:dm-crypt-request@saout.de?subject=subscribe>
To: dm-crypt@saout.de

Apologies for replying my own post.

I believe I found the not so happy answer for me in Dr. Wagner's monthly
FAQ.

Is it possible to provide salt manually?
Implementing a simple logic may allow re-generating the original header
in case something bad happens, but I admit it makes sense keeping
backups of lhdrs somewhere safe.

Thanks,
Miklos

On 12/02/2010 11:28 AM, Miklos Bagi wrote:
> Hi all,
>
> I'm hoping to get directions with a 'small' recovery task.
>
> Given a partition that's known to be a broken LUKS one, lhdr is missing
> (incl magic, chipher, hash, uuid, etc.), however there are some facts known:
> - chipher: aes-cbc-essiv:sha256
> - keysize: 256 bits
> - offset: 2056 sectors
> - most importantly: we have the master key file available.
>
> I have the suspicion that the first approx 10% of the partition have
> been overwritten with random data.
> What are the chances of recovering any data in the given scenario?
>
> Thanks in advance,
> mB
>