Search found 4 matches

by pkfpvtkr
02 Nov 2019, 21:50
Forum: File recovery
Topic: decrypting eCryptfs files recovered by photorec
Replies: 5
Views: 7100

Re: decrypting eCryptfs files recovered by photorec

Anything else I can try, or do you think I'm out of luck?
by pkfpvtkr
04 Oct 2019, 00:17
Forum: File recovery
Topic: decrypting eCryptfs files recovered by photorec
Replies: 5
Views: 7100

Re: decrypting eCryptfs files recovered by photorec

The home directory was originally encrypted when Linux Mint was loaded, which I believe uses /usr/bin/ecryptfs-setup-private which has this in it:

CIPHER="aes"
KEYBYTES="16"

I'm not sure if there's a more accurate way to tell.
by pkfpvtkr
28 Sep 2019, 18:38
Forum: File recovery
Topic: decrypting eCryptfs files recovered by photorec
Replies: 5
Views: 7100

Re: decrypting eCryptfs files recovered by photorec

Sorry, bad link, it's actually https://forum.cgsecurity.org/phpBB3/viewtopic.php?f=7&t=7535

Here is the command
sudo mount -t ecryptfs -o ecryptfs_passthrough=n,key=passphrase,ecryptfs_enable_filename_crypto=n,ecryptfs_key_bytes=16,ecryptfs_cipher=aes crypted decrypted

then when it prompts for ...
by pkfpvtkr
20 Sep 2019, 16:16
Forum: File recovery
Topic: decrypting eCryptfs files recovered by photorec
Replies: 5
Views: 7100

decrypting eCryptfs files recovered by photorec

photorec recovered a lot of eCryptfs files for me, and I'm trying post #5 from https://forum.cgsecurity.org/phpBB3/...pic.php?t=7535
supplying it the passphrase from running a ecryptfs-unwrap-passphrase on the actual system, but then i get warnings like

WARNING: Based on the contents of [/root ...