reallymine icon indicating copy to clipboard operation
reallymine copied to clipboard

key block from a Symwave WD drive

Open themaddoctor opened this issue 8 years ago • 5 comments
trafficstars

00562600 57 4d 59 53 fa 01 01 f8 00 00 00 00 02 00 00 00 |WMYS............| 00562610 b7 1e 9a 37 36 40 5d db 42 25 89 a0 9e 97 b0 8d |...76@].B%......| 00562620 fa bc 6f 46 4d 54 57 25 ab 44 02 e0 6a 5a 07 f0 |..oFMTW%.D..jZ..| 00562630 96 f4 79 ba e7 cc f2 80 15 88 b9 b5 72 b1 03 20 |..y.........r.. | 00562640 f3 65 eb 88 91 70 f9 e7 09 9a ee cb 58 05 ad 97 |.e...p......X...| 00562650 e3 6e b3 6d 5f 78 c9 cd fe cb 85 c0 43 50 06 8d |.n.m_x......CP..| 00562660 0f b6 50 6e 1a 36 30 8c 8e 25 9b fa 32 26 6b 6a |..Pn.60..%..2&kj| 00562670 04 02 72 61 c0 a9 f3 65 a1 b4 b5 55 0c d4 e7 c7 |..ra...e...U....| 00562680 f1 52 3b f2 46 b3 e8 69 00 00 00 00 00 00 00 00 |.R;.F..i........|

no password was set

extracted key: c3e28b880b87c9c65c62b7250398a1ef926dbf75e6c2779a69d0ac5a9c3c1aeb

corrected for endianness: 888be2c3c6c9870b25b7625cefa1980375bf6d929a77c2e65aacd069eb1a3c9c

themaddoctor avatar Feb 04 '17 16:02 themaddoctor

Will this work for any Symwave drive that doesn't have a password set?. I have a 3TB MyBook WDBACW0030HBK. thanks

jvillarrealn avatar Oct 19 '17 18:10 jvillarrealn

Symwave security is implemented in just the right (wrong?) way that I can decrypt drives without needing a password at all. Symwave support is already in reallymine; you can try it and see if it works. Does this key sector not work?

andlabs avatar Oct 19 '17 18:10 andlabs

Hi Andlabs, i haven't installed Reallymine, i'm a newbie in Linux / ubutu, trying to figure it out. I was wondering if the Key that Mr maddoctor posted above, would be the same for all Symwave drives with no password.
i will try to install reallymine and see if it works on my drive.
thanks

jvillarrealn avatar Oct 19 '17 18:10 jvillarrealn

You won't need to explicitly provide a key. decrypt will figure that out automatically. You may want to try the version at #38 to see if that recovers your drive successfully (since that issue is blocking further development of reallymine), or use the version I released on the Releases tab of the project page to get a slower but tested decryption.

andlabs avatar Oct 19 '17 20:10 andlabs

Thank you so much, i'll try that and report back.

I appretiate it very much


From: Pietro Gagliardi [email protected] Sent: Thursday, October 19, 2017 3:44 PM To: andlabs/reallymine Cc: jvillarrealn; Comment Subject: Re: [andlabs/reallymine] key block from a Symwave WD drive (#26)

You won't need to explicitly provide a key. decrypt will figure that out automatically. You may want to try the version at #38https://github.com/andlabs/reallymine/issues/38 to see if that recovers your drive successfully (since that issue is blocking further development of reallymine), or use the version I released on the Releases tab of the project page to get a slower but tested decryption.

— You are receiving this because you commented. Reply to this email directly, view it on GitHubhttps://github.com/andlabs/reallymine/issues/26#issuecomment-338032279, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AfaUAnj7tHITwqgCtrziJ4A6ix112oJ7ks5st7StgaJpZM4L3MWf.

jvillarrealn avatar Oct 19 '17 20:10 jvillarrealn