PGP Encrypted Drive

[Philip Shaw]

Good morning. I have a customer who has PGP encryption on her computer and the computer failed. She took it to the company she used to work for but they couldn't help. I have an image of the drive but since it is encrypted there is no folder structure and nothing in raw recovery. Is there some tool that is available to decrypt this drive?

Thanks.

[LUIS D AGUILAR]

Do you have the PGP Keys for Decrypt it? As far as I know not all Revovery Softwares includes an Option for PGP Decrypt.  As BitLocker you must have the PGP Hash Keys to Decrypt it.  If you got R-Studio or UFS Explorer reach them for help.  Maybe one of them have a Special Function to Decrypt PGP but Need the Keys.

On Sat, Jun 8, 2024, 9:35 AM Philip Shaw <shawcomput...@gmail.com> wrote:

Good morning. I have a customer who has PGP encryption on her computer and the computer failed. She took it to the company she used to work for but they couldn't help. I have an image of the drive but since it is encrypted there is no folder structure and nothing in raw recovery. Is there some tool that is available to decrypt this drive?

Thanks.

--
Data Recovery Certification Group / for issue with google group please email sc...@myharddrivedied.com
---
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/CAPG2QkZAUMArU%3DOf0ynOA33-%2BmMR%3DYR%3Da-Bv2py9n6vwOEOedA%40mail.gmail.com.

[Philip Shaw]

I do have the key. I tried R-Studio and UFS Explorer but they don't seem to offer decryption for PGP. I guess I can try downloading PGP itself but I just wanted to see if there was some other way of doing it.

Thanks.

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/CABfL34%2BcRTYUmZuXmt4MM_NmAFOPqPiJ1o8YcoLGG2YMUT5TXg%40mail.gmail.com.

[Alandata Recovery]

What version of pgp?

How old is this system.

The first sector of the drive or volume gives clues to the version. 

Was it bootable? 

If you try to boot does it come up with pgp boot screen?  There should also be a help out info screen there. 

I dealt with this a lot.

I would clone the drive. 

The pgp decryptor is on a bootable floppy. Boot the floppy, enter key and decrypt drive. 

I imagine this could be done virtually.

I have a collection of pgp floppies.

Another way is to install PGP on a system and then attach the encrypted drive as a secondary drive and use PGP to decrypt.

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/CAPG2QkbQsV875SE9UX%3DiX_0_eVnbYB79hWptmca0DvzaL%3Dt9BA%40mail.gmail.com.

[wayne horner]

Some notes....

To use a WDRT via the command line to decrypt a slaved disk
Windows XP
 Click Start>Run.
Type cmd in the Open field and click OK.
Change to the following directory: C:\Program Files\PGP Corporation\PGP Desktop
Determine the disk number by typing
     pgpwde --enum
Press Enter:
Verify the WDRT of the authorized user of the disk by typing
     pgpwde --disk <Disk #> --verify-user --rt <Whole Disk Recovery token>
Decrypt the disk using a WDRT by typing
     pgpwde --disk <Disk #> --decrypt --rt <Whole Disk Recovery token>
Example:
pgpwde --disk 2 --decrypt --rt 91J56-ZGYE1-25F06-HUT4V-CQUK2-YJE
Press Enter.
pgpwde --disk 2 --decrypt --rt H9AAR-2DCU0-VQ3W0-YBCJD-XP5VU-L5F
recovery images here
https://support.symantec.com/en_US/article.TECH214378.html
Symantec Drive Encryption command line tool.
Usage: pgpwde --action [--options,...]

ACTIONS
  -h, --help
      Print this help

  --info

Alandata Data Recovery -  (949)287-3282  
"Cleanroom Data Recovery of RAID, VMware, Network Attached Storage, Linux, Tape, Disk, Forensics"

www.AlanData.com   www.AlanDataRecovery.com

To view this discussion on the web visit https://groups.google.com/d/msgid/datarecoverycertification/CAH-%2BjWQoy8ZpSC23JfyxJMa5U6ewfhNoknTbA0zHm98gNWkBAg%40mail.gmail.com.

[Rennex _]

Passware offers that feature.. if you don't mind the cost.