bepaald / signalbackup-tools

Tool to work with Signal Backup files.
GNU General Public License v3.0
817 stars 38 forks source link

Trying restore of a broken Backup: Endframe was not read #235

Closed pamkkl closed 2 months ago

pamkkl commented 2 months ago

Hi,

trying to recover from a local backup I get the following error message:

*** Starting log: 2024-08-30 08:17:19 *** 
signalbackup-tools (./signalbackup-tools) source version 20240829.224217
BACKUPFILE VERSION: 1
BACKUPFILE SIZE: 3302823676
COUNTER: 2546150986
Reading backup file: 000.0%...
[Error]: Failed to read next frame (1411482144 bytes at filepos 60)
 *** NOTE : IT IS LIKELY AN INCORRECT PASSPHRASE WAS PROVIDED ***
[Warning]: EndFrame was not read: backup is probably incomplete
Database version: 4294967295

Exporting backup to 'myrestore'
Writing HeaderFrame...
Writing DatabaseVersionFrame...
[Error]: DataBaseVersionFrame not found
[Error]: Failed to export backup to 'myrestore'

Passphrase exactly matches the previously displayed output. Files were daily backuped via syncthing. I tried it with blanks and without, is the backup corrupted? Would be happy for any other suggestions to recover.

bepaald commented 2 months ago

Hi!

I am sorry to have to bring bad news. It is extremely unlikely that there is data corruption, in these cases it is almost 100% certain that the passphrase was not correct. Though, technically, there is no way to distinguish the two cases. Either way, I'm afraid you're out of luck: brute forcing the passphrase is not doable, and recovering from data corruption (like this tool used to do) is not possible anymore since BACKUPFILE VERSION: 1 (any backup after around July 2023).

So unfortunately, I wouldn't know what you could possibly do at this point. In the past I've recommended people (who were also convinced they had the correct passphrase) to try every other passphrase they had written down. This has actually turned out to be the solution more than once. Also, if you have older backups still around, you could try using one of those. But other than that there is nothing I can think of. Sorry.

I'll close this, as I don't think there is anything actionable, but if you have any questions or remarks let me know! Thanks!

pamkkl commented 2 months ago

I was expecting this... Anyways, thanks for your help and for the nice tool. I'll be using it in the future to verify backups are readable.