Date: Mon, 5 Apr 2004 11:28:52 -0700 From: John-Mark Gurney <gurney_j@efn.org> To: Poul-Henning Kamp <phk@phk.freebsd.dk> Cc: freebsd-geom@freebsd.org Subject: Re: how ro recover encrypted slice Message-ID: <20040405182852.GC567@funkthat.com> In-Reply-To: <1788.1081149679@critter.freebsd.dk> References: <c3421fc3355c.c3355cc3421f@nyroc.rr.com> <1788.1081149679@critter.freebsd.dk>
next in thread | previous in thread | raw e-mail | index | archive | help
Poul-Henning Kamp wrote this message on Mon, Apr 05, 2004 at 09:21 +0200:
> In message <c3421fc3355c.c3355cc3421f@nyroc.rr.com>, mmarkows@twcny.rr.com writ
> es:
> >I mounted a GEOM-encrypted slice to /home2 and stored all my data there. Two days ago, I decided to update my FreeBSD from 5.2 to 5.2.1. I have done it several times before, so I felt self-assured. I backed up my config files, forgetting unfortunately about /etc/gbde/ad1s2.
> >
> >During the update procedure my system was messed up to the extent that it seemed reasonable to do a clean install of 5.2.1. I did it without saving /etc/gbde/ad1s2, and without touching the encrypted slice.
> >
> >Now, I am in a predicament because I cannot access my files that I need for my work tomorrow. I know that I messed up, but my last backup is 3 weeks old, and essentially it is no good any more.
> >
> >Is there any way to recover the data? I have 13 hours to do it.
>
> The data stored in the file you lost is only the encrypted location of
> the master key, so in theory you could do a brute force search for the
> master key.
Doesn't this mean he can restore from his 3 week old backup of
/etc/gbde/ad1s2, and then get back to bussiness? I assume that his
backup covered /etc... and that /etc/gbde/ad1s2 doesn't change over
time...
--
John-Mark Gurney Voice: +1 415 225 5579
"All that I will do, has been done, All that I have, has not."
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040405182852.GC567>