search

andlabs / reallymine

WD MyBook encrypted hard drive decryption (still WIP).
https://github.com/andlabs/reallymine/issues/38
GNU General Public License v3.0
214 stars 47 forks source link

decrypted.img remains zero bytes in size. #134

Open JoshAust opened 2 years ago

JoshAust commented 2 years ago

Hi. First, thanks for this great program.

I have a 3TB Western Digital Essentials drive that the USB board has died. I cannot seem to source one online with the same firmware, hence why I am trying reallymine instead.

I connnected the drive to a PC directly via the SATA port. The drive has zero bad sectors, pending bad sectors ore reallocation events.

I ran reallymine via ubuntu and it successfully made an image of the drive overnight. However, the image size was only a bit over 300GB in size.

I did some research, and it appears that when the drive is connected via the USB-SATA bridge, the drive appears as 4096 bytes per sector, however when directly connected to the SATA port, it appears as 512 bytes per sectors ( 1/8 of the size) So I assume that is why the image is approximately one 1/8 of the drives size.

So, I instead imaged the 3Tb drive onto a brand new blank 4TB drive using ddrescue. That ran overnight and came to 3TB in size, so I assume it imaged OK, as no errors were reported.

HOWEVER, when I re ran reallymine on that 4TB drive, it creates the decrypt.img file, however it remains as zero bytes, and never grows in size. reallymine still appears to be running.

I've tried rebooting it, and re-running it, with no change.

The command I'm running is: sudo ./reallymine decrypt /dev/sdb decrypted.img

Any help, suggestions etc greatly appreciated.

JoshAust commented 2 years ago

I really am grateful for your help. I noticed the book you have on Cryptography - did you write it? You seem to know a lot about the topic!

themaddoctor commented 2 years ago

That book isn't relevant to modern cryptography. But thanks.

JoshAust commented 2 years ago

I have been following, and vaguely attempting to decypher the Kryptos sculpture, that is at the CIA headquarters in Langely Virginia. No luck, but fun to try some stuff on it occasionally. Have you had a go at it? The first three parts have been solved - substitution ciphers and vigniere ciphers were used for the first two parts, but the final part - only 97 characters, has never been solved.

JoshAust commented 2 years ago

So that book, while yes, outdated for modern methods, is still very interesting.

themaddoctor commented 2 years ago

I have looked at it, but not for a long time. The ciphertext is very short, so that makes it very difficult.

JoshAust commented 2 years ago

Yes, that seems to be the major stumbling block.

Hey, do you have a paypal address? I'd like to pay you a small amount for your time.

themaddoctor commented 2 years ago

If you like classical crypto, you might enjoy cipherchallenge.org The challenge starts in October. They start off easy and get harder. If you go to the site now, there is a preview challenge for teachers.

I do not have paypal, but thanks anyway.

JoshAust commented 2 years ago

Thank you. I'll certainly have a look at the cipherchallenge website. Once again, thank you so much for your help and advice.