TrueCrypt - Custom File Signature
Posted: 18 Feb 2014, 08:25
Hi,
I have an issue with the following:
I have a truecrypt container on my ext4 drive which somehow vanished. I have no clue how and why and I want to recover it. As TC containers contain random data there is no clear signature, I know that. But I have a backup (which is 3 months old though) where I can make an identification on and that's the result. So I booted a Ubuntu Live CD and this is the result.
There is no real magic string nor should the first bytes of the file change. The file doesn't have any file extenstion and I wanted to know if somebody could help me create a signature for this if even possible?
Thanks a lot for your help in advance,
Alex
I have an issue with the following:
I have a truecrypt container on my ext4 drive which somehow vanished. I have no clue how and why and I want to recover it. As TC containers contain random data there is no clear signature, I know that. But I have a backup (which is 3 months old though) where I can make an identification on and that's the result. So I booted a Ubuntu Live CD and this is the result.
Code: Select all
root@ubuntu:/home/ubuntu/Downloads/testdisk-7.0-WIP# hexdump -C /media/ubuntu/bluray/backup/20131107/vmware/share/container | head
00000000 e8 8f 9a 0c c4 df 7e ce ad 43 87 e8 75 7d 8f 3a |......~..C..u}.:|
00000010 09 a9 8d a4 d2 b5 b5 4e 78 77 d6 49 d4 cb b2 89 |.......Nxw.I....|
00000020 bc c2 92 9f cb 91 53 d0 f9 25 d3 81 3f 18 58 d9 |......S..%..?.X.|
00000030 7a 20 47 5f 9b 6d 29 60 4f 5f 06 6a 7a f1 11 2a |z G_.m)`O_.jz..*|
00000040 06 f4 cf 3f c7 a2 6a 51 5d 63 c5 d7 16 e1 fd 37 |...?..jQ]c.....7|
00000050 a5 1a a7 5f 40 cb 52 e3 bb 3e 5a 74 94 93 82 0c |..._@.R..>Zt....|
00000060 d5 23 b2 36 97 c3 04 3b a9 b5 33 cd cd ba 32 e2 |.#.6...;..3...2.|
00000070 f8 08 bd 4a 29 e4 73 bd a0 c9 3c ad 28 e3 22 9b |...J).s...<.(.".|
00000080 4a d4 6a ec 8d 91 f7 06 1e d8 9f 77 db 21 81 d5 |J.j........w.!..|
00000090 e8 28 46 f0 91 12 7e ae 29 1a 05 aa 68 f4 5d fb |.(F...~.)...h.].|
Thanks a lot for your help in advance,
Alex