Input/Output error when I read decrypted *.eCryptfs file Topic is solved

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
dhfbv
Posts: 2
Joined: 22 Dec 2021, 18:26

Input/Output error when I read decrypted *.eCryptfs file

#1 Post by dhfbv »

I used photorec and got three .eCryptfs file.

```
mkdir crypted decrypted
mv *.eCryptfs crypted
ecryptfs-recover-private crypted
```
Showed:
INFO: Success! Private data mounted at [/tmp/ecryptfs.aNvzhSaQ].

```
cd /tmp/ecryptfs.aNvzhSaQ
cat xxxxx.eCryptfs
```
Showed:
Input/Output error.

```python
f = open('xxxxx.eCryptfs', 'rb')
```
Showed:
OSError: [Errno 5] Input/output error: '/tmp/ecryptfs.aNvzhSaQ/xxxxx.eCryptfs'

I tried to use `mount -t ecryptfs` command.
```
sudo mount -t ecryptfs -o ecryptfs_passthrough=n,key=passphrase,ecryptfs_enable_filename_crypto=n,ecryptfs_key_bytes=16,ecryptfs_cipher=aes crypted decrypted
```
Showed:
Not adding sig to user sig cache file; continuing with mount.
Mounted eCryptfs

There's also `Input/Output error` for all the .eCryptfs files as it is in `tmp` folder.

How to fix that? Any hints appreciated.
recuperation
Posts: 3027
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Input/Output error when I read decrypted *.eCryptfs file

#2 Post by recuperation »

The recovery failed, your files are partly broken.
dhfbv
Posts: 2
Joined: 22 Dec 2021, 18:26

Re: Input/Output error when I read decrypted *.eCryptfs file

#3 Post by dhfbv »

recuperation wrote: 22 Dec 2021, 21:04 The recovery failed, your files are partly broken.
Thanks. That's the right answer.
Locked