HDD GURU FORUMS
http://forum.hddguru.com/

Crypted controllers
http://forum.hddguru.com/viewtopic.php?f=10&t=13915
Page 1 of 2

Author:  quasimodo [ November 12th, 2009, 23:32 ]
Post subject:  Crypted controllers

I have recently started to look more into NAND Recovery since the demand is getting bigger and I receive more requests. Do any of the Commercial Flash Readers have the ability to decode the data that have been encrypted by some of the controllers. Specifically I am interested in SanDisk. Does PC3K Flash and or Salvation's Tool have the ability to deal with 20-99-00128-3 for example?

Thanks!

Author:  Doomer [ November 13th, 2009, 0:03 ]
Post subject:  Re: Crypted controllers

nope

Author:  drc [ November 13th, 2009, 3:07 ]
Post subject:  Re: Crypted controllers

Out of curiosity Doomer do you guys have any way of dealing with this short of having a big stock of working controllers to match?

Author:  quasimodo [ November 13th, 2009, 8:34 ]
Post subject:  Re: Crypted controllers

From my understanding SanDisk for example uses the AES Algorithm and the key is unique per each controller. Would it be possible to read the encryption key directly from the controller chip? I have not looked into this, but if the encoding of the controller is understood then finding and reading out the key should be a theoretical option.

Has anyone tried this?

Author:  dobrevjetser [ November 13th, 2009, 8:50 ]
Post subject:  Re: Crypted controllers

Yesterday i talked to someone from sandisk, and he says they recover themselves defective flash cards with encryption. They send it to ireland where they replace the controller. Would the key be not so unique after all ?
Or is he just talking BS :) ?

Dobre

Author:  drc [ November 13th, 2009, 9:32 ]
Post subject:  Re: Crypted controllers

I'm pretty sure I have seen other folks looking for specific controllers to recover with

Author:  quasimodo [ November 13th, 2009, 10:35 ]
Post subject:  Re: Crypted controllers

....Interesting

Author:  drc [ November 13th, 2009, 17:32 ]
Post subject:  Re: Crypted controllers

I had not heard of sandisk performing recovery though, I assume this is a paid service?

Author:  drc [ November 13th, 2009, 17:34 ]
Post subject:  Re: Crypted controllers

Looking at their website it looks like they just recommend sending it to these guys:

http://lc-tech.com/services/recoveryservices.html

It can't be too hard as the only charge $75-$125... either that or they have a very low success rate :)

Author:  pcimage [ November 13th, 2009, 18:29 ]
Post subject:  Re: Crypted controllers

I think you'll find these guys only do logical recoveries for that price.

Author:  dobrevjetser [ November 16th, 2009, 4:01 ]
Post subject:  Re: Crypted controllers

That guy from Sandisk talked as if it was Sandisk themselves doing the recovery, although i find it strange also. And yes, it was a paid service.

Dobre

Author:  quasimodo [ January 6th, 2010, 2:28 ]
Post subject:  Re: Crypted controllers

Any updates on this thread. Is anyone successfully performing recoveries on crypted controllers?

Author:  pninja [ January 6th, 2010, 3:57 ]
Post subject:  Re: Crypted controllers

quasimodo wrote:
Any updates on this thread. Is anyone successfully performing recoveries on crypted controllers?

According to SD, their SD-Falsh handles controller encrypted data too.
However, I tried MSI controller encrypted 2GB chip and SD failed to find any valid data node on it.
I am not sure about PC-3K flash.

Author:  zebong [ January 6th, 2010, 7:02 ]
Post subject:  Re: Crypted controllers

i am waiting for the new version of pc3kflash.

Lets see what ACE lab will make it for us.

Author:  drc [ January 6th, 2010, 9:16 ]
Post subject:  Re: Crypted controllers

pninja wrote:
According to SD, their SD-Falsh handles controller encrypted data too.

I'm sure it has no problem removing the mix and producing a still-encrypted image of the drive :P

Author:  pninja [ January 7th, 2010, 2:32 ]
Post subject:  Re: Crypted controllers

drccsc wrote:
pninja wrote:
According to SD, their SD-Falsh handles controller encrypted data too.

I'm sure it has no problem removing the mix and producing a still-encrypted image of the drive :P

Yes it can. Problem is how to handle the encrypted image.

Author:  drc [ January 7th, 2010, 10:16 ]
Post subject:  Re: Crypted controllers

pninja wrote:
Problem is how to handle the encrypted image.

Right, and if they say their tool can do that then I say BS.

Author:  quasimodo [ January 7th, 2010, 14:01 ]
Post subject:  Re: Crypted controllers

pninja wrote:
quasimodo wrote:
Any updates on this thread. Is anyone successfully performing recoveries on crypted controllers?

According to SD, their SD-Falsh handles controller encrypted data too.
However, I tried MSI controller encrypted 2GB chip and SD failed to find any valid data node on it.
I am not sure about PC-3K flash.


Yes, I too find it hard to believe that SD can recover from encryption, specially since their more experienced competitors can not.

Author:  dobrevjetser [ January 7th, 2010, 14:50 ]
Post subject:  Re: Crypted controllers

I think they are referring to the "xor" encryption which is not really an encryption and quite easy to find.
If they can break the AES-128 encryption i think they will have a customer at the CIA :lol:

Dobre

Author:  pepe [ January 7th, 2010, 16:00 ]
Post subject:  Re: Crypted controllers

I am sure CIA has the power over AES. Otherwise we weren't allowed to use it... :D

Page 1 of 2 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/