MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 12 posts ] 
Author Message
 Post subject: Lacie D2 Safe for recovery
PostPosted: July 23rd, 2008, 5:11 
Offline

Joined: March 20th, 2008, 7:53
Posts: 2
Location: S. Wales
Hello, I have a Lacie D2 Safe external, i am trying to access the data for recovery, as the caddy has a biometric fingerprint reader i cant see anyway to get around this. I took the drive out of the caddy and opened up various pieces of recovery software to see if i could recovery all the data without the caddy, but nothing seems to be able to do this without giving errors and crashing, i have tested the drive and it is physically fine, so i am assuming there is some sort of encryption on this drive and because i cant access any of the data
Is there any method i can use to access this drive without the having the fingerprint of the user??

Any help would be appreciated
Thanks


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: July 23rd, 2008, 5:19 
Offline

Joined: April 28th, 2008, 6:54
Posts: 69
How did you test it?


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: July 23rd, 2008, 8:16 
Offline

Joined: March 20th, 2008, 7:53
Posts: 2
Location: S. Wales
I tested it using MHDD, drive doesn't click, scans with all good sectors


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: July 23rd, 2008, 10:30 
Offline

Joined: April 28th, 2008, 6:54
Posts: 69
You say it crashes when scanned using software - what sort of error messages you seeing? CRC errors? I can't see how encrypted data would cause data recovery software to crash. What does it look like in a hex editor? can you see 'data'?

have you been on the Lacie site?

IMPENETRABLE DATA PROTECTION
With its revolutionary hardware encryption, the LaCie SAFE Mobile Hard Drive guaranties ultimate security for your highly confidential data. Files stored on the hard disk are automatically coded—without transfer rate compromise. Even if the drive is pulled out from the casing, data remains encrypted and no corruption is possible. The encryption depends on a sole key stored directly on the board; this innovative technology makes each drive unique.


I suggest you ask your customer to remove a finger and send it in the post or You could try to idendify which chip holds the key and transfer it to an identical caddy then ask your client to test the unit.


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: July 23rd, 2008, 10:40 
Offline

Joined: December 23rd, 2006, 16:08
Posts: 935
Location: NJ
Just ask the customer to send you their finger :)

It's likely not recoverable. I haven't worked on these, but I'd be pretty pissed if I bought one, thinking my data was secure, and it could be bypassed by taking the drive out of the enclosure. I see one of four scenarios:

1) The data is encrypted by a single key, determined at the factory.
2) The data is encrypted with a random key, stored on the drive itself
3) The data is encrypted with a random key, stored in flash,
4) The data is encrypted with a key determined by the fingerprint itself

If it's #1 or 2, there might be a utility somewhere that will decrypt the drive. If I was LaCie, I'd keep such a utility under lock and key.

If it's #3, you'll need a method of decryption, and a way to read the flash.

If it's #4, there will be no decryption without the original finger.

This all assumes they used strong encryption. Some research might produce answers to these questions.


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: July 23rd, 2008, 10:48 
Offline

Joined: December 23rd, 2006, 16:08
Posts: 935
Location: NJ
Ahhh, based on that information, it looks like #3. There's a possibility this could be bypassed with some research. For instance, you might have a chip for the fingerprint reader, and a chip for the encrypt/decrypt. It might be something as insecure as a single line going low or high. Examining a working drive would be a start. Also, if you have access to the flash chip, you could back it up, use another unit programmed with your fingerprint, and copy the key into your unit, and put their drive into yours. It might not be that easy, as they might use the same flash chip to store the encryption code, and the fingerprints. You might have to determine how all that is stored.


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: July 23rd, 2008, 10:57 
Offline

Joined: April 28th, 2008, 6:54
Posts: 69
so basically it's going to be a right pain in the arse.


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: July 31st, 2008, 15:08 
Offline

Joined: April 28th, 2008, 6:54
Posts: 69
Nice to see he followed up on his own thread. Next time he's needs advice, I know where I am not going to bother wasting my time typing!


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: June 8th, 2009, 23:32 
Offline

Joined: August 8th, 2007, 6:32
Posts: 1238
Location: inside ROM
I have done one but luckily i have the customer's finger, now i have the enclosure with me and it is unusable, even i replace the drive it wont work, apparently like above mentioned (rchadwick).

Is there any way to re-use the enclosure? its a waste if i have to discard it. :)


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: June 9th, 2009, 0:43 
Offline

Joined: July 18th, 2006, 3:05
Posts: 7476
Location: ITALY
No.


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: September 17th, 2009, 0:41 
Offline

Joined: August 8th, 2007, 6:32
Posts: 1238
Location: inside ROM
TerraNova wrote:
Is there any way to re-use the enclosure? its a waste if i have to discard it. :)


Anyone got solution to resuse the enclosure yet?


Top
 Profile  
 
 Post subject: Re: Lacie D2 Safe for recovery
PostPosted: September 18th, 2009, 0:39 
Offline

Joined: August 8th, 2007, 6:32
Posts: 1238
Location: inside ROM
rchadwick wrote:
Ahhh, based on that information, it looks like #3. There's a possibility this could be bypassed with some research. For instance, you might have a chip for the fingerprint reader, and a chip for the encrypt/decrypt. It might be something as insecure as a single line going low or high. Examining a working drive would be a start. Also, if you have access to the flash chip, you could back it up, use another unit programmed with your fingerprint, and copy the key into your unit, and put their drive into yours. It might not be that easy, as they might use the same flash chip to store the encryption code, and the fingerprints. You might have to determine how all that is stored.



If i were to erase the flash SST39VF400A will the enclosure resuable?


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 12 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 54 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group