key block from a Symwave WD drive

[themaddoctor]

00562600 57 4d 59 53 fa 01 01 f8 00 00 00 00 02 00 00 00 |WMYS............|
00562610 b7 1e 9a 37 36 40 5d db 42 25 89 a0 9e 97 b0 8d |...76@].B%......|
00562620 fa bc 6f 46 4d 54 57 25 ab 44 02 e0 6a 5a 07 f0 |..oFMTW%.D..jZ..|
00562630 96 f4 79 ba e7 cc f2 80 15 88 b9 b5 72 b1 03 20 |..y.........r.. |
00562640 f3 65 eb 88 91 70 f9 e7 09 9a ee cb 58 05 ad 97 |.e...p......X...|
00562650 e3 6e b3 6d 5f 78 c9 cd fe cb 85 c0 43 50 06 8d |.n.m_x......CP..|
00562660 0f b6 50 6e 1a 36 30 8c 8e 25 9b fa 32 26 6b 6a |..Pn.60..%..2&kj|
00562670 04 02 72 61 c0 a9 f3 65 a1 b4 b5 55 0c d4 e7 c7 |..ra...e...U....|
00562680 f1 52 3b f2 46 b3 e8 69 00 00 00 00 00 00 00 00 |.R;.F..i........|

no password was set

extracted key:
c3e28b880b87c9c65c62b7250398a1ef926dbf75e6c2779a69d0ac5a9c3c1aeb

corrected for endianness:
888be2c3c6c9870b25b7625cefa1980375bf6d929a77c2e65aacd069eb1a3c9c

[jvillarrealn]

Will this work for any Symwave drive that doesn't have a password set?.
I have a 3TB MyBook WDBACW0030HBK.
thanks

[andlabs]

Symwave security is implemented in just the right (wrong?) way that I can decrypt drives without needing a password at all. Symwave support is already in reallymine; you can try it and see if it works. Does this key sector not work?

[jvillarrealn]

Hi Andlabs, i haven't installed Reallymine, i'm a newbie in Linux / ubutu, trying to figure it out.
I was wondering if the Key that Mr maddoctor posted above, would be the same for all Symwave drives with no password.
i will try to install reallymine and see if it works on my drive.
thanks

[andlabs]

You won't need to explicitly provide a key. decrypt will figure that out automatically. You may want to try the version at #38 to see if that recovers your drive successfully (since that issue is blocking further development of reallymine), or use the version I released on the Releases tab of the project page to get a slower but tested decryption.

[jvillarrealn]

Thank you so much, i'll try that and report back. I appretiate it very much

…

________________________________ From: Pietro Gagliardi <[email protected]> Sent: Thursday, October 19, 2017 3:44 PM To: andlabs/reallymine Cc: jvillarrealn; Comment Subject: Re: [andlabs/reallymine] key block from a Symwave WD drive (#26) You won't need to explicitly provide a key. decrypt will figure that out automatically. You may want to try the version at #38<#38> to see if that recovers your drive successfully (since that issue is blocking further development of reallymine), or use the version I released on the Releases tab of the project page to get a slower but tested decryption. — You are receiving this because you commented. Reply to this email directly, view it on GitHub<#26 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AfaUAnj7tHITwqgCtrziJ4A6ix112oJ7ks5st7StgaJpZM4L3MWf>.