Are you saying that non-original 0x8003 makes all data scrambled?
This sounds impossible. AFAIK is not read by the drive and it's written only externally.
I can check it when I'm back at work but very likely you made a mistake somewhere during the test

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

I can certainly recheck. I'll use Spyglass and the same Charger for comparison.

Can you also modify the foreign 0x8003 module by changing the reported SATA capacity to the IDEMA standard? For example, for a 2TB model, change 3906963632 to 3907029168. Then see if the reported capacity does indeed change. If it does, then this will be additional confirmation that the drive makes use of this module.

See https://forum.hddguru.com/viewtopic.php?p=320999#p320999

_________________
A backup a day keeps DR away.

Could this have something to do with it?

_________________
A backup a day keeps DR away.

I'll have my re-test tomorrow when I head into the office.

This makes the most sense to me:
MCU-held secret / state + SA-held drive-specific value / state -> correct decryption context

In module 0x8003,
For Charger it is 3906963632,

while for CaramelR 7200 it is 3907029168,

Charger is self encrypting while CaramelR 7200 is not.
Hope it helps.

MSM DATA RECOVERY

The reduced capacity is typical of 2.5" Passport and Elements models. I believe the intent is to prevent the host from accessing the SmartWare encryption key at the end of the user area.

_________________
A backup a day keeps DR away.

it's space for a VCD with unlocking software

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

I'm fully aware of that, but there is a twist. See my other thread on the subject. Normally, when the bridge is removed, the SATA drive then reverts to its full IDEMA capacity. However, this does not happen in recent USB models.

_________________
A backup a day keeps DR away.

Hi,
Module 8003 is only an information module; it does not store information about disk capacity reduction.
Information about disk capacity reduction is stored in module 02.

Mikippp

Not in this case. See my other thread on this subject. All 5 capacity parameters in module 0x02 reflect the full IDEMA capacity. The SATA drive somehow knows that it was a USB model with a protected VCD area, and it continues to hide this area even after SATA conversion.

As for 0x8003 being an information module, that's what I assumed until @WebClaw's experiment suggested otherwise.

_________________
A backup a day keeps DR away.

Capacity reduction works via a switch in module 02.
Simply change 80 to 00 in one place and the full disk capacity will be restored.

Mikippp

I take that as a challenge. I've narrowed it down to three candidates in three separate sections.

When people convert these drives (Passport) to SATA, are they able to decrypt them with PC3000 by using the key in module 0x25? Or do they need to replace the coupling capacitors and decrypt the data via the USB bridge?

_________________
A backup a day keeps DR away.

I told you, you should think about investing in DR,,,

I was away for few days and i saw some good progress, some are moving forward and others are going to the wrong direction.
Just a little final comment here for anyone who thinks am bluffing..



"Send me any healthy drive from those MCU locked families, in addition to the native ROM (hate to waste more time testing) and i will send you here screenshot of what you have inside"
i believe this is the best proof of concept i can do to prove that am not bluffing. (in addition to my fees in advance)

@msmdatarecovery Welcome here, Its good to know someone new here singing the same song well.

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein

Why is even the most basic question treated like an industry-busting trade secret?

As for the quote "the secret to creativity is knowing how to hide your sources", "there is no substantive evidence that Einstein ever made a remark of this type".

https://quoteinvestigator.com/2014/06/01/creative/

In any case, the phrase means that you are telling us that you are not creative. Instead, you are saying that you have appropriated someone else's work and are passing it off as your own.

_________________
A backup a day keeps DR away.

You know me ; I don't waste my time on pointless arguments.
If you were in DR you will understand my research like the others who replied, and it is not my job to explain every single word from what am writing to YOU here.

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein

@einstein9, if you use quotes to make a point, you should first understand what they mean, otherwise the result could be embarrassing.

_________________
A backup a day keeps DR away.

Neither.
First thing you need to understand is WD had many types of encryption during the evolution of encrypted drives (more than 10). And Passports had at least 8 different encryptions.
Second, module 25 was useful for drives that used USB bridge chip for encryption (WD stopped using USB chips for encryption about 10 years ago).
Modern drives are truly SED (the encryption is done by the MCU itself) and they also have evolved; the latest drives are using 4th SED modification and are require original MCU for decryption (because of the random keys).
Removing the capacitors is disconnecting USB bridge from the drive, so it wouldn't mess with SATA signals when we work with the drive (soldering SATA connector is required). Theoretically we can still work through USB bridge but it's not convenient and firmware of the USB bridge would need to be altered.

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

I get all my information via firmware dumps and forum posts. I see cases where the SA key modules are empty, and the VCD area is also empty, so it would appear that firmware has evolved but retained vestigial elements, like a human appendix. It makes no sense to hide an unused, empty area, but I guess it wouldn't be the first time this has happened.

Thanks for the explanation.

_________________
A backup a day keeps DR away.

_________________
A backup a day keeps DR away.