+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Support (https://hashcat.net/forum/forum-3.html)
+--- Forum: hashcat (https://hashcat.net/forum/forum-45.html)
+--- Thread: help with LUKS data recovery (/thread-7165.html)
Pages:
1
2
RE: help with LUKS data recovery - j45645hn45 - 01-06-2018
(01-06-2018, 05:19 PM)philsmd Wrote: Was your original luks volume generated by some GUI or web-interface etc and you do not know what settings it uses?
Exactly this.
I mounted the fs now and created a random file on it and redid the whole process. Now I have randomness in the header, and I can decrypt it using hashcat. My guess is the VM is to blame, since I used a dynamically allocated virtual hard drive. In any case, it works now and I can direct my attention at the original header.
Thanks a lot for your help!
RE: help with LUKS data recovery - j45645hn45 - 02-16-2018
I am still trying to crack my hash. I just noticed that the cipher mode is set to cbc-essiv : sha256 in my real volume compared to xts-plain64. Does the cipher mode make any difference to hashcat, is it able to detect it or do I have to feed the proper arguments to it?
RE: help with LUKS data recovery - atom - 02-16-2018
Hashcat autodetects this.
RE: help with LUKS data recovery - j45645hn45 - 02-17-2018
Thank you atom.