Page 1 of 1
Ecryptfs file found by Photorec
Posted: 28 Aug 2020, 18:29
by johnjones
Hey all,
Photorec has found a .ecryptfs file. This is obviously an encrypted file. I haven't encountered .ecryptfs files ever before and am unable to decrypt it wthout the passphrase which I don't have.
Is there any way I can decrypt it without the passphrase? Any programs you guys could direct me to that could help to decrypt it? thanks
Re: Ecryptfs file found by Photorec
Posted: 28 Aug 2020, 19:40
by recuperation
johnjones wrote: 28 Aug 2020, 18:29
Hey all,
Photorec has found a .ecryptfs file. This is obviously an encrypted file. I haven't encountered .ecryptfs files ever before and am unable to decrypt it wthout the passphrase which I don't have.
Is there any way I can decrypt it without the passphrase? Any programs you guys could direct me to that could help to decrypt it? thanks
For only USD 10.000 in BTC equivalent I will open it for you.
Re: Ecryptfs file found by Photorec
Posted: 28 Aug 2020, 20:38
by johnjones
I'm poor sorry.
Plese offer constructive advice or a solution?
Re: Ecryptfs file found by Photorec
Posted: 28 Aug 2020, 23:37
by recuperation
Well, the easiest solution would be to ask the owner for the passphrase. The fact that you don't have it suggests that he does not want you to open the file.
Keep in mind that your file could have the same fingerprint as an ecryptfs file by chance. Furthermore the file could be incorrectly assembled - something the human eye is able to judge very easily when opening a broken jpeg file p.e.
So please no waterboarding or other torturing of the owner because failing in deciphering does not necessarily mean he was lying to you. And putting somebody in jail like they do in the United Kingdom would be pretty much inadequate, too, based on the reasoning I mentioned.
This is where support for you ends because we would like to focus on data recovery using Testdisk and Photorec in this forum.
Once we start answering questions like yours the forum will drift away from its genuine purpose.
You might want to search for a specialized forum dedicated to your question.
Yours sincerely
John Doe