5

basically I had normal, not encrypted disk, which I thought is my truecrypt drive. I booted from TrueCrypt Rescue Disk.iso and selected "Permanent Decrypt my data". It complained about key data being overriden - fine, i restored it from that same CD, and then ran decrypt.

Of course that made my data go away. However, AES is the symmetric algorithm, and, I'm thinking, if I run encrypt command over previously "decrypted" data (with the same master key/headers), I should get my data back. Am I correct? Any clue how can I do this?

1
  • anything wrong with my question to downvote it? please explain - i'm more than happy to improve..
    – avs099
    Nov 11, 2015 at 19:33

1 Answer 1

4

looks like i'm not the only one. Somebody already created a tool for that: https://cryptoservices.github.io/truecrypt/2015/04/21/truecrypt-back-to-front.html - the story, and the tool: https://github.com/nccgroup/Untrue

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .