Recovered files from Mac OS X

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read
Posts: 1
Joined: 07 Aug 2013, 14:48

Recovered files from Mac OS X

#1 Post by khymon »

Hi there,

I am using Photorec on a linux box and I am facing quite a problem.

I was recovering files from a hfs+ hdd that ran under Mac OS X 10.7. and was encrpyted with FileVault. Now, among others, photorec found over 280.000 files from that device and restored them as ".ecryptfs" file type. I wonder if I get these files decrypted somehow.

All tutorials I found so far were using "ecryptfs-recover-private", which I tried. It seemed to have the files unlocked and mounted them as ecryptfs under /tmp/XXXXXXX, but there I could only find the same files as before - all of them of type ".ecryptfs". The password I entered was answered with "successful" (I am 100% sure that I know the correct password).

So is there anything I can do to get these files unlocked?