Hi all,
I have an encrypted laptop hard drive that has suddenly become corrupted. I want to recover my files from it, so I used a bootable helix CD to create a DD image of the drive to an external hard drive.
In encase I have mounted the DD. I believe there is a utility to decrpyt i Encase (and Encase 6.X supports ultimaco safeguard decryption?). My question is, how do we do this? I have read that the "restore" utility should be used, but for a corrupted image would this still work?
Thank you for any help with this.
Many encryption algorithms use block chaining where the output of the each encrypted block is dependent on the cyphertext output of the preceding block. Once corruption occurs in any block you won't be able to decrypt anything following the bad block output as the "seed" for the next block is incorrect.