From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from partidopirata.com.ar (partidopirata.com.ar [IPv6:2a03:f80:354:ca7:ea75:b12d:18:e967]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.server123.net (Postfix) with ESMTPS for ; Tue, 31 May 2016 16:54:42 +0200 (CEST) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by partidopirata.com.ar (Postfix) with ESMTPSA id 7296F2A1133 for ; Tue, 31 May 2016 10:54:39 -0400 (EDT) References: <574CB690.5030401@partidopirata.com.ar> From: fauno Message-ID: <574DA5AB.4020406@partidopirata.com.ar> Date: Tue, 31 May 2016 11:54:35 -0300 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="KasHwiKpgbed8LBGAmpANs1ubAw7NmsXA" Subject: Re: [dm-crypt] LVM on LUKS: volumes missing List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: dm-crypt@saout.de This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --KasHwiKpgbed8LBGAmpANs1ubAw7NmsXA Content-Type: multipart/mixed; boundary="U5f0qI7F5AkDsV8762NN304wVR8a0KkTb" From: fauno To: dm-crypt@saout.de Message-ID: <574DA5AB.4020406@partidopirata.com.ar> Subject: Re: [dm-crypt] LVM on LUKS: volumes missing References: <574CB690.5030401@partidopirata.com.ar> In-Reply-To: --U5f0qI7F5AkDsV8762NN304wVR8a0KkTb Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 31/05/16 09:52, Robert Nichols wrote: > Take a look at the decrypted volume with "hexedit -s". It should start > out with mostly binary zeros with a little data including the ASCII > string "LVM2" at the start of a few of the sectors. Starting at about > the 10th sector there should be a lot of ASCII text. (It's a copy of th= e > corresponding file in /etc/lvm/backup, though without the fancy > formatting.) >=20 > If you're seeing random-appearing binary junk there, then the volume is= > not be decrypted properly. If it's just some of the early sectors that > are clobbered and the text starting at the 10th sector is intact, then > this should be recoverable. >=20 i've tried reading `hexedit` both on the closed and opened partition and everything seems to be random junk. `strings` also can't find anything resembling LVM data. --=20 :{ --U5f0qI7F5AkDsV8762NN304wVR8a0KkTb-- --KasHwiKpgbed8LBGAmpANs1ubAw7NmsXA Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQF8BAEBCgBmBQJXTaWrXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0OUY3MDdBMUNCMzY2QzU4MEU2MjVCM0M0 NTYwMzJENzE3QTRDRDlDAAoJEEVgMtcXpM2c45oH/iciH7RNwKZ7dYOPiqO8245b UmOj2AOn6Uzbn6LN5fqegaHwRZnrTH7NBIur51wVafh1d1zmTP0m18SdkEqwm5eF k866o3AcTmSczBf2pqTAvvFUYtF921/AVj9Hj+vAtiVlu44ba8/ken57S0bjGylR K4CW9ultVDiU1j8Sr57kk2sNc4oMGJrW1RtgnOXiit3K45ydMU/YaoiA1wdTeRQI NqHF2yGMHf9fYnbGoO8Rm64tMXgSnAV9NU8TAkJwESYe4bQYV3+7HHgzcPqftWtK LKRnB404CNSBRXOTj1uC/aktyxN0bH9UhM4jWX2bipAB2zNrbWhMLAKijdP62II= =O8qm -----END PGP SIGNATURE----- --KasHwiKpgbed8LBGAmpANs1ubAw7NmsXA--