Recovering from full drive encryption
Posted: October 24th, 2019, 4:37
This is purely an academic question.
An SSD with controller brand X, some NAND-chips brand Y. The drive is fully encrypted by the user (no hardware encryption). Controller X dies because of some reason, but NAND-chips are intact. An exactly the same drive is bought (same X, same Y, same everything) as a donor.
Recovery options (four separate, not consequtive):
1. Chip off.
2. Replace Dead X with Donor X.
3. Move NAND-Y to donor drive (same locations).
4. Fill Donor with some data, perform chip off recovery to get the structure.
Option 1 is out of the deal due to the full drive encryption, but what about 2-4? Are any of these feasible for an encrypted scenario?
An SSD with controller brand X, some NAND-chips brand Y. The drive is fully encrypted by the user (no hardware encryption). Controller X dies because of some reason, but NAND-chips are intact. An exactly the same drive is bought (same X, same Y, same everything) as a donor.
Recovery options (four separate, not consequtive):
1. Chip off.
2. Replace Dead X with Donor X.
3. Move NAND-Y to donor drive (same locations).
4. Fill Donor with some data, perform chip off recovery to get the structure.
Option 1 is out of the deal due to the full drive encryption, but what about 2-4? Are any of these feasible for an encrypted scenario?