Re: Way to decrypt an encrypted /home

[Tyler Hicks <tyhicks@canonical.com>]

[-- Attachment #1: Type: text/plain, Size: 2673 bytes --]

On 2015-04-01 09:52:49, Marc de Verdelhan wrote:
> Hi there,

Hello! Sorry to hear about the trouble you're having.

> 
> I made a huge mistake and I need some help.
> 
> I was running Linux Mint 17 (based on Ubuntu 14.04) with an encrypted
> home directory (using eCryptfs). /home and / were on separated
> partitions.
> Last week I replaced Mint by Debian. I formatted the / partition and
> kept the /home one. Now I can't decrypt my data. :/

Did you record the randomly generated mount passphrase? After you set up
an encrypted home directory in Ubuntu, you receive a pop up dialogue box
informing you to record the mount passphrase and keep it somewhere safe.
If you followed that advice, we can save a lot of time debugging the
issue below.

Tyler

> 
> So I installed the ecryptfs-utils package.
> 
> "ecryptfs-mount-private" returns:
> Error: Unwrapping passphrase and inserting into the user session
> keyring failed [-5]
> Info: Check the system log for more information from libecryptfs
> ERROR: Your passphrase is incorrect
> 
> "/var/log/syslog" contains:
> ecryptfs-insert-wrapped-passphrase-into-keyring: Incorrect wrapping
> key for file [/home/login/.ecryptfs/wrapped-passphrase]
> ecryptfs-insert-wrapped-passphrase-into-keyring: Error attempting to
> unwrap passphrase from file
> [/home/login/.ecryptfs/wrapped-passphrase]; rc = [-5]
> 
> "ecryptfs-unwrap-passphrase
> /home/.ecryptfs/login/.ecryptfs/wrapped-passphrase" returns:
> Error: Unwrapping passphrase and inserting into the user session
> keyring failed [-5]
> Info: Check the system log for more information from libecryptfs
> 
> To be sure I reinstalled the original Linux Mint on the / partition,
> using the same login:password as before my misfortune. Same results.
> I'm ABSOLUTELY sure that I'm using the same login and password than
> last week. I installed Linux Mint 17 on June 2014; the ecryptfs-utils
> version should have been "104-0ubuntu1".
> 
> So questions are:
> 1) What happened? Did I erase a configuration file I shouldn't? I
> would like to understand what operation occurred to be in that
> unpleasant situation?
> 
> 2) What are my options? It may involve some C development if needed.
> According to you, is there a way to brute force something? Or a more
> intelligent solution, starting with sit down, have a tea and think.
> 
> Any help will be greatly appreciated. Thank you for reading.
> 
> Marc
> --
> To unsubscribe from this list: send the line "unsubscribe ecryptfs" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 819 bytes --]