All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 8 posts ] 
Author Message
 Post subject: WDC WD10TMVW-11ZSMS_500550005_1372_ Encryption
PostPosted: June 28th, 2018, 15:50 
Offline

Joined: September 17th, 2016, 16:06
Posts: 53
Location: India
Hello , Today I rx a WDC WD10TMVW-11ZSMS5_01.01A01_WD-WXL1E61LPWN2_00550005_1372_256 as a USB 3 drive which spun perfectly but did not detect.

Changed the usb board to equivalent SATA with standard procedures and drive got DRD DSC over sata, showed full capacity and ID when auto get details were clicked.
Scanned the drive and it began the process smoothly. The USB 3 had JMS538S so encryption was already suspected.
When I explored the sectors in HEX, the data looked encrypted. All res backup was done one by one and so far things were smooth and fast.

To make sure, I usually connect it to my DDI and do a head map and a media test, it reveals firstly the heads are ok and secondly on imaging the drive, if there is no mbr, mft,idx,media etc etc
loading up at the MFT area, I consider it encrypted for sure.

Explored the module 25 to see if it had the keys and the keys were certainly there.

It has been my little observation which may be true and equally untrue for cases that encrypting drives usually have a SA lock and this drive was not having any SA locks.
I had also seen that the data fails to decrypt if the SA is kept unlocked. So had an idea that problem was revolving around 02 itself.
Tried to lock the SA with marvell but still over the JSM bridge I have, it failed to give any data. All the blocks appeared as unreadable /yellows in DDI.

So finally i gazed around 8032 and made 02 out of it, matched the lengths and patched it.
Drive successfully gave all data decrypted over the USB bridge that I have.

Here are the attached modules. On comparing the 02 backup from 8032 and the original 02 itself, there are so many changes that i see in HxD.

I humbly request you to please comment on how to tackle such cases if there are more ways to solve.

--


Attachments:
02 and 02 made from 8032.rar [1.84 KiB]
Downloaded 22 times
Top
 Profile  
 
 Post subject: Re: WDC WD10TMVW-11ZSMS_500550005_1372_ Encryption
PostPosted: June 28th, 2018, 16:00 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
sin wrote:
I humbly request you to please comment on how to tackle such cases if there are more ways to solve.

--


You can try to use the same "trick" that you did use to get a module 02 that will make your drive properly work on the next case that you get and report back ! Maybe this will work just fine on other WD drive families as well ...

Something set at module 02 was preventing the drive from properly initialize ? The factory "copy" of modue 02 allowed the drive to properly initialize over USB so that you could gain to your data ...

This is somothing we should remember so that we can try it out on simmilar cases ...

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WDC WD10TMVW-11ZSMS_500550005_1372_ Encryption
PostPosted: June 28th, 2018, 16:07 
Offline

Joined: September 17th, 2016, 16:06
Posts: 53
Location: India
Hi, sure something which looks like a cool trick to my infancy may be an old story to many folks here :D

Unfixed drive over usb3 gave no detection or data.

Neither on DFL/Windows nor on DDI.

--


Top
 Profile  
 
 Post subject: Re: WDC WD10TMVW-11ZSMS_500550005_1372_ Encryption
PostPosted: June 28th, 2018, 16:23 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
sin wrote:
Hi, sure something which looks like a cool trick to my infancy may be an old story to many folks here :D

Unfixed drive over usb3 gave no detection or data.

Neither on DFL/Windows nor on DDI.

--


Ok, if the "fixed" drive now does allow data access this is something that we might want to remember for future use !

"Maybe" the factory copy of module 02 does have other type of settings that does allow for data access even the that access is "locked" when some conditions are present on a drive with the normal working copy of 02.

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WDC WD10TMVW-11ZSMS_500550005_1372_ Encryption
PostPosted: June 28th, 2018, 16:27 
Offline

Joined: September 17th, 2016, 16:06
Posts: 53
Location: India
The drive is currently not SA locked. Which means that 02 made out of 8032 has no SA locking instructions. Yet engages the JMS chip to start the decryption process if data is requested.
Over the last two months I have noticed that, encryption and SA locking are not necessarily simultaneous in nature.

SA locked drives are usually the encrypted ones that I saw. However this drives brings one more picture, SA is not locked, Drive is encrypted and gives data from 8032 extracted 02.

good day ahead.
--


Top
 Profile  
 
 Post subject: Re: WDC WD10TMVW-11ZSMS_500550005_1372_ Encryption
PostPosted: June 28th, 2018, 16:35 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
Ok, nice to know that.

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
 Post subject: Re: WDC WD10TMVW-11ZSMS_500550005_1372_ Encryption
PostPosted: June 29th, 2018, 18:19 
Offline

Joined: September 17th, 2016, 16:06
Posts: 53
Location: India
Hey there. Hope you are doing great today.
Where is fzabkar these days?

--


Top
 Profile  
 
 Post subject: Re: WDC WD10TMVW-11ZSMS_500550005_1372_ Encryption
PostPosted: June 29th, 2018, 20:54 
Offline
User avatar

Joined: December 19th, 2006, 8:49
Posts: 9510
Location: Portugal
sin wrote:
(...)Where is fzabkar these days?

--


Still here - viewtopic.php?f=28&t=37001&start=20

:D :D :D

_________________
1Q9xrDTzTddUXeJAFRn37aqh1Yr6buDCdw - (Bitcoin Donations)
paypal.me/Spildit - (PayPal Donations)
The HDD Oracle - Platform for OPEN research on Data Recovery.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 8 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group