my passport essential

[jerovsek]

Hello,

can someone identify what is this

Attachments

[mr_spokk]

Encryption...

[jerovsek]

is possible to identify type of encryption

[fzabkar]

It's hard to find any WD docs that explicitly state the encryption algorithm, but I believe it is 256-bit AES.

FWIW, here is a My Book doc:

http://store.wdc.com/store/wdus/en_US/D ... y.13434000

[jerovsek]

thank you Mr_spokk and Mr. Žabkar.
How important is PCB revision
symwave sw6316-3vb14 d12823 00 and sw6316-3vb14 d1499 00

[mr_spokk]

thank you Mr_spokk and Mr. Žabkar.
How important is PCB revision
symwave sw6316-3vb14 d12823 00 and sw6316-3vb14 d1499 00

This should be enough: sw6316

[fzabkar]

reallymine: Western Digital MyBook/MyPassport decryption:
https://github.com/andlabs/reallymine

reallymine is a program that decrypts the encrypted hard drives of Western Digital MyBook and MyPassport external hard drives (and some rebranded derivatives).

Currently, it can only decrypt JMicron and Initio bridge chip-based devices that use AES-256-ECB encryption. I'd love to expand this to cover Symwave and PLX/Oxford Semiconductor bridge chips and the other known encryption modes, but I need your help; see below. It also does not currently handle entering passwords; if your drive is password-protected (and the bridge chip requires a password) but most of the work is already there (in kek.go); I just need to write the code that actually lets you type in a password, and then we'll be fine.

Simply run the program, providing the drive to decrypt and a file that the decrypted image will be stored to:

reallymine encrypted decrypted

It appears that the program now successfully decrypts symwave bridges:

https://github.com/andlabs/reallymine/c ... 9dd86947d8

Merged the Symwave decrypter into the main program since it now seems to work fine.

[jerovsek]

Thank you Mr_spokk and Mr. Zabkar,

I Will try it, when I come back

[HaQue]

Doesn't encryption usually have very high entropy? Are you saying this dump is part of the key, salt or some other part of the encryption itself? I don't see how this can be encrypted data.

[fzabkar]

Doesn't encryption usually have very high entropy? Are you saying this dump is part of the key, salt or some other part of the encryption itself? I don't see how this can be encrypted data.

The dump is sector 0. The repeating pattern of 16 bytes (= 128 bits) is consistent with encrypted zeros.

[HaQue]

Doesn't encryption usually have very high entropy? Are you saying this dump is part of the key, salt or some other part of the encryption itself? I don't see how this can be encrypted data.

The dump is sector 0. The repeating pattern of 16 bytes (= 128 bits) is consistent with encrypted zeros.

Thanks Franc, as you can see I know nothing about encrypted conventional drives