Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
March 31st, 2024, 5:50
Comparing 1st. sector with other 2 PCBs (3k/winhex) in SpyG2 Ultra
- Attachments
-
March 31st, 2024, 6:27
Wow ,
I would assume even if the drive if Encrypted By CPU ,We could swap PCB's ,Is this what you are trying to observe in this Anwar sir .
March 31st, 2024, 8:18
you are far Amarbir from the point
March 31st, 2024, 11:30
einstein9 wrote:you are far Amarbir from the point
Well,
You Are a League Apart Anwar Sir ...
April 1st, 2024, 4:16
Amarbir
SpyG2 Ultra used 2 other USB3 with the same ROM written to both & gives the same Enc. pattern in sec0
means something?
April 1st, 2024, 11:06
do you get different data from lba 0 if you turn of SED?
April 1st, 2024, 11:49
Sector 0 does not look like a GPT MBR that was encrypted by WD's AES algorithm. I would normally expect to see two identical 16-byte lines in the partition table corresponding to two empty partition entries. Or am I misunderstanding something?
April 1st, 2024, 16:34
on these drives encryption is salted with something lba and offset (somehing like that), so you cannot see any patterns.
April 1st, 2024, 16:35
on these drives encryption is salted with something lba and offset (somehing like that), so you cannot see any patterns.
edit: sorry for the double post
April 2nd, 2024, 4:43
@pepe
I didn`t change the SED (am aware of this)
@ fzabkar
Yes, its Encrypted,,,
The point here is no matter what Other USB pcb you use the encrypted sectors are the same (tested on this family now but i assume the others are the same)
I hope will get the good news about those MCU locked drives
April 3rd, 2024, 4:57
@ fzabkar
attached is the ROM
"What is the capacity (in sectors) that is reported by the USB mass storage device?" you will find it on the photo i uploaded (the inner photo top left 5TB - 9767473632)
FYI (since you are not into DR) those MCU PCBs are a must to access the data,
Original USB3 PCB >>> Data accessiable
Any other USB3 PCB (my case here) >>> whole drive encrypted (unique key inside MCU for data access)
My point is: no matter what other USB3 pcb you use >> sectors encryption is the same (as in photo to compare)
does this mean something??? maybe and may not
- Attachments
-
- IS25WQ040@SOP8.rar
- (324.23 KiB) Downloaded 387 times
April 3rd, 2024, 5:35
Your original post confused me. You seemed to be suggesting that all PCBs, including the native one, produced the same encrypted result. Therefore, I was wondering whether the ROM code was ignoring the MCU key.
April 3rd, 2024, 6:10
I thought so,,, thats why i explained it in details on my prev. post
April 3rd, 2024, 14:25
I suspect that an explanation for this behaviour might have something to do with modules 0x181, 0x1A2, 0x1B0 and 0x1B6.
Module 0x1A2 has a 0x60-byte digital signature.
- Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000010 5C D1
00000020 E8 BA 65 81 96 D0 69 58 A3 17 17 84 B6 E6 7E 0A
00000030 DE B8 70 C5 39 68 98 A0 87 05 2C CF 72 1D 92 1B
00000040 67 28 1E B0 AE 1B 28 F6 6B BA CD A8 03 F3 13 FB
00000050 2B 6B AB 7D 2D 4F 14 C6 8A 1F A9 5B CD F7 50 1C
00000060 F0 85 F4 90 8B 21 E2 0A 1F 6D 06 72 56 CD 2B CA
00000070 3E DD 26 7D A4 F7 14 32 8A 2A A0 E8 2F 43
Module 0x1B0 has a 0x100-byte digital signature.
- Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000020 A7 EB 0D C7 3F FA E0 CA 1B 1F E9 6C ED 65 5E BB
00000030 F1 B4 30 EE 60 7E 49 36 85 75 8E 73 1C EC B5 D5
........
00000100 D1 16 BE DE C1 9F 96 CE 39 4E E7 1C A9 26 26 77
00000110 61 92 DE CA 4C 73 2D 56 55 F1 DF E6 54 B7 5E E1
00000120 00 00 00 00 01 00 01 00
Module 0x1B0 has 3 digital signatures.
0x180-byte signature
- Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000010 74 D3
00000020 A5 F0 31 9C 19 0C E9 D2 34 BA 7E F8 0C 64 2A E1
00000030 DA 5A 96 1E 91 BF 42 E7 9C 1B 70 57 18 00 E1 61
........
00000180 D9 17 1F D1 7A 12 4A FF 1B BD 07 C8 E0 2E 13 59
00000190 BB 67 15 F2 F8 98 F0 A4 D3 7E D1 1E AB B4 01 00
000001A0 01 00 00 00 00 00
0x200-byte signature
- Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000290 12 5E
000002A0 77 ED 74 F0 B2 76 86 CA 48 91 81 57 FA 85 82 01
000002B0 10 F2 FF 9E 40 30 37 BA 1E 8C FA 4F D9 07 81 66
........
00000480 BA 2B 09 06 13 C4 10 43 FD FF D3 69 97 F5 4A F0
00000490 07 0A 29 BA EC D4 06 26 8E D6 CF 36 EE CF 01 00
000004A0 01 00 00 00 00 00
0x100-byte signature
- Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
00000590 51 41
000005A0 68 4C 91 E7 05 C5 7D 2D 16 E1 6E 6C AA C8 44 45
000005B0 F4 D4 F7 6F 27 21 66 FE 94 5D 02 49 0E 7B 18 DB
........
00000680 AC 47 09 8E 16 36 2B 26 8E 69 C2 34 19 50 08 E4
00000690 2C 6A B7 8D E3 48 0A 47 30 40 8B DA E1 07
April 4th, 2024, 3:48
I wrote the same ROM without any modification to those USB pcbs and as i said before and others too
Unique encryption key is located inside MCU (original pcb) not related to the ROM itself only
April 4th, 2024, 4:19
what do you get with those 2 non-native pcbs if you turn SED off ?
April 4th, 2024, 7:55
pepe wrote:what do you get with those 2 non-native pcbs if you turn SED off ?
you mean writing original ROM (UN-patched by 3k) to usb3 results the same encrypted pattern as in photo in my 1st. post
April 4th, 2024, 8:05
SED off = turn it off in 02, use orig rom and the non-native pcb.
do you get the same data?
April 4th, 2024, 8:26
Yes pepe the same
Powered by phpBB © phpBB Group.