unknown wrote:
The drive in topic is locked with ata password.
I can read FW modules but i can't find the password with normal method in mod. 02
Has anyone know in which module i can find the password?
MRT can't access the FW.
Is it a SED?
Is there anything in modules 0x124 and 0x127?
got HW crypto? On the (in)security of a Self-Encrypting Drive series:
https://eprint.iacr.org/2015/1002.pdfQuote:
Facing a protected HDD is not new problem for HDD forensics. As there are already existing commercial solutions (e.g PC-3000), we analyzed the HDD directly with those tools. Their approach seems to follow a straight pattern, which allows SA access by overwriting the RAM/ROM and bypass security features like ATA passwords and optionally AES keys. By forcing SA access and manipulating the SA area 0x124 and 0x127 we were able to unlock the HDD and disable the SATA AES encryption. Note that this works always, independent of the chosen user password and bridge status.