MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]


Forum rules


Please do not post questions about data recovery cases here (use this forum instead). This forum is for topics on finding new ways to recover data. Accessing firmware, writing programs, reading bits off the platter, recovering data from dust...



Post new topic Reply to topic  [ 87 posts ]  Go to page Previous  1, 2, 3, 4, 5
Author Message
 Post subject: Re: WD MCU - No more...
PostPosted: Yesterday, 17:46 
Offline
User avatar

Joined: September 29th, 2005, 12:02
Posts: 3589
Location: Chicago
WebClaw wrote:
Original PCB. Original MCU. Normal plaintext baseline. Modified the SA structure being discussed, power cycled, and read the same area again.
=Encrypted

Are you saying that non-original 0x8003 makes all data scrambled?
This sounds impossible. AFAIK is not read by the drive and it's written only externally.
I can check it when I'm back at work but very likely you made a mistake somewhere during the test

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.


Top
 Profile  
 
 Post subject: Re: WD MCU - No more...
PostPosted: Yesterday, 18:00 
Offline

Joined: November 24th, 2011, 21:48
Posts: 253
Location: Canada
I can certainly recheck. I'll use Spyglass and the same Charger for comparison.


Top
 Profile  
 
 Post subject: Re: WD MCU - No more...
PostPosted: Yesterday, 22:08 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 17204
Location: Australia
Can you also modify the foreign 0x8003 module by changing the reported SATA capacity to the IDEMA standard? For example, for a 2TB model, change 3906963632 to 3907029168. Then see if the reported capacity does indeed change. If it does, then this will be additional confirmation that the drive makes use of this module.

See https://forum.hddguru.com/viewtopic.php?p=320999#p320999

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: WD MCU - No more...
PostPosted: Yesterday, 22:24 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 17204
Location: Australia
Doomer wrote:
2. On top of that initial SysTick value also need to be exact as it was during original keys generation (not sure how it's achieved).

Could this have something to do with it?

Code:
RT-02450 1/31/2019 10:04:28 AM

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: WD MCU - No more...
PostPosted: Yesterday, 23:44 
Offline

Joined: November 24th, 2011, 21:48
Posts: 253
Location: Canada
I'll have my re-test tomorrow when I head into the office.

This makes the most sense to me:
MCU-held secret / state + SA-held drive-specific value / state -> correct decryption context


Top
 Profile  
 
 Post subject: Re: WD MCU - No more...
PostPosted: Today, 4:06 
Offline

Joined: May 9th, 2024, 14:00
Posts: 7
Location: india
fzabkar wrote:
Can you also modify the foreign 0x8003 module by changing the reported SATA capacity to the IDEMA standard? For example, for a 2TB model, change 3906963632 to 3907029168. Then see if the reported capacity does indeed change. If it does, then this will be additional confirmation that the drive makes use of this module.

See https://forum.hddguru.com/viewtopic.php?p=320999#p320999

In module 0x8003,
For Charger it is 3906963632,

while for CaramelR 7200 it is 3907029168,

Charger is self encrypting while CaramelR 7200 is not.
Hope it helps.

MSM DATA RECOVERY


Top
 Profile  
 
 Post subject: Re: WD MCU - No more...
PostPosted: Today, 4:12 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 17204
Location: Australia
The reduced capacity is typical of 2.5" Passport and Elements models. I believe the intent is to prevent the host from accessing the SmartWare encryption key at the end of the user area.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 87 posts ]  Go to page Previous  1, 2, 3, 4, 5

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 29 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group