Date: Mon, 14 Mar 2016 00:05:08 +0000 From: "Luis P. Mendes" <luislupe@gmx.com> To: freebsd-fs@freebsd.org Subject: Possible to recover encryption key after newfs? Message-ID: <20160314000508.GA24712@hp.tbl>
next in thread | raw e-mail | index | archive | help
Hi, A couple years ago, right when I was formatting a second hard drive to serve as backup of the first, I accidentally made a `newfs` of the /root slice of the first disk where the geli encryption key was stored for the slice of the data compartment. I ran several undelete softwares but could not find the file that had a filename of ada0p8.key or something like that. I don't remember whether it was just a alphanumeric file or plain binary, perhaps with 128 bytes long, but not sure. As such, the file has no signature, so the recover process by undelete softwares was not possible by this way. I also tried to examine hex data, but since it's a big 2GB partition I couldn't find the key file. So, is there a way to be able to recover this file? Some little program to read byte by byte and seek for only alphanumeric characters that are 128 bytes long? (if it's alphanumeric and if it's 128 bytes long...) Any other clues? -- Luis Mendes
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20160314000508.GA24712>