User avatar
kilgor
Data Recovery Noob
Posts: 21
Joined: Thu Jul 19, 2018 5:19 am
Contact: Facebook

Fileault decryption

Wed Sep 12, 2018 8:41 am

I got an seagate HDD. Some of it files are crypted with filevault and my cliend asks to decryp them. I have pc3000 UDMA tool. Can some body help me to do it.
Thank you.

User avatar
Jared
Forum Admin
Posts: 3492
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Fileault decryption

Wed Sep 12, 2018 12:35 pm

FileVault is a full disk encryption system (well, full LVM I guess). So it's impossible that just some of the files are encrypted with it. They either all are, or they're encrypted with something different.

User avatar
kilgor
Data Recovery Noob
Posts: 21
Joined: Thu Jul 19, 2018 5:19 am
Contact: Facebook

Fileault decryption

Thu Sep 13, 2018 7:54 am

well as I learned during the encryption process computer got frozen and they shut it down manually. after that they formatted it. right now I am trying to get these files from format after that it scares me to face with these filevault encrypted files.

User avatar
Jared
Forum Admin
Posts: 3492
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Fileault decryption

Thu Sep 13, 2018 9:22 am

kilgor wrote:well as I learned during the encryption process computer got frozen and they shut it down manually. after that they formatted it. right now I am trying to get these files from format after that it scares me to face with these filevault encrypted files.


In that case they are in really tough shape. You've got to hope the DEK wasn't overwritten by the format. Could be totally screwed.

Return to “Cyber Security & Malware”

Who is online

Users browsing this forum: No registered users and 0 guests