Encryption in WM 6 - 8525, TyTN, MDA Vario II, JasJam ROM Development

I am having problem with the encryption. All my files in SD are converted into .menc file and i have reset the Hermes. Is it anyway to decrypt such files?
Please please do brain storming. I did searched internet but no result.
thx

eriksurya said:
I am having problem with the encryption. All my files in SD are converted into .menc file and i have reset the Hermes. Is it anyway to decrypt such files?
Please please do brain storming. I did searched internet but no result.
thx
Click to expand...
Click to collapse
Did you enable the encrytion under settings\systems? Uncheck that if you did.

ai6908 said:
Did you enable the encrytion under settings\systems? Uncheck that if you did.
Click to expand...
Click to collapse
I did. It's not because of that. Because I had rebotted and lost the encryption key.

eriksurya said:
I did. It's not because of that. Because I had rebotted and lost the encryption key.
Click to expand...
Click to collapse
AES-128.. No Key = Youre stuffed..
http://blogs.msdn.com/windowsmobile...ows-mobile-6-storage-card-encryption-faq.aspx
What happens if the device is cold booted?
If the device is reset and internal flash is cleared, the decryption keys are lost. If the keys were preserved, it would be easy to access the storage card of a stolen device by just cold booting the stolen device and clearing its storage, then re-inserting the stolen card.

Related

Encrypted SD files are locked

I chose to encrypt the files on my SD card using the option in under system. i have flashed to a new ROM and forgot to copy the files from my SD to my PC and now they all have locks on them and i cannot open them . anyone know how i can unlock them in any way or do i need to just delet them and move on?
TIA
Based on what I know of how the encryption works, I think you're going to be stuck deleting the files and moving on. Everything I've read says that you can't recover files encrypted by one handset on a different handset (which your newly flashed handset is, in terms of the encryption algorithm).
Sorry.
celith said:
Based on what I know of how the encryption works, I think you're going to be stuck deleting the files and moving on. Everything I've read says that you can't recover files encrypted by one handset on a different handset (which your newly flashed handset is, in terms of the encryption algorithm).
Sorry.
Click to expand...
Click to collapse
Thanks for your help
Yep, they're gone. When you flashed, you wrote over the key you need to decrypt them.

Clear storage/hard reset?

What is the different between the 2? I don't mean to sound stupid, but don't they both do the same thing?
I know to clear storage, i can do that from Settings, but to Hard Reset some people are suggesting to shut off the phone and hold Volume UP and Volume DOWN... all this stuff
don't they both do the same thing?
Yes, they both will do hard reset. But doing it via the button press combination enabled you to do it without going into the OS. It's helpful for when you messed something up so bad that your device won't boot.
oh okay... that makes sense, thanks man
The hard reset will actualy clear everything and make it like you just took your phone out of the box. Clearing storage will leave some things unchanged in the OS.
Zzim said:
The hard reset will actualy clear everything and make it like you just took your phone out of the box. Clearing storage will leave some things unchanged in the OS.
Click to expand...
Click to collapse
That's not true. Going to "Clear Storage", entering "1234", and tapping "yes" is equal to hard reset.
Zzim said:
The hard reset will actualy clear everything and make it like you just took your phone out of the box. Clearing storage will leave some things unchanged in the OS.
Click to expand...
Click to collapse
Leave what unchanged exactly?
Clear Storage takes it back to the default settings of the ROM. Everything 'reloads' so to speak just like after a hard-reset.
It's the equivalent of "Restore to Factory defaults" on other phones.
Exactly the same as an HR.
so even if i flashed 6.5 wwe, and have hardspl it will return it back to 6.1 "out of the box"
so even if i flashed 6.5 wwe, and have hardspl it will return it back to 6.1 "out of the box"
badnewswrx said:
so even if i flashed 6.5 wwe, and have hardspl it will return it back to 6.1 "out of the box"
Click to expand...
Click to collapse
No... It's restored to factory-defaults only if you haven't already replaced the factory rom contents with a new rom.
perfect thats waht i needed to hear!
Does it matter if the memory card is in, it is not going to delete all the applications on it I guess. How about all the contacts, I couldn't find them on the phone, no idea where exactly they were stored
ivoniko said:
Does it matter if the memory card is in, it is not going to delete all the applications on it I guess. How about all the contacts, I couldn't find them on the phone, no idea where exactly they were stored
Click to expand...
Click to collapse
Contacts are stored on the device (I believe in a file called pim.vol at the root of the device), and will be lost of a hard reset is performed. There is a free program called PIMBackup which will back up and restore your contacts.
As far as having your SD Card in, it doesn't matter, I hard reset all the time, and don't lose any card data. However, if you've enabled storage card encryption, you need to disable it before your hard reset or you will lose all data on the card. This is because it will still be encrypted and your device will fail to read it, as it no longer knows the encryption key.
DaveTheTytnIIGuy said:
Contacts are stored on the device (I believe in a file called pim.vol at the root of the device), and will be lost of a hard reset is performed. There is a free program called PIMBackup which will back up and restore your contacts.
As far as having your SD Card in, it doesn't matter, I hard reset all the time, and don't lose any card data. However, if you've enabled storage card encryption, you need to disable it before your hard reset or you will lose all data on the card. This is because it will still be encrypted and your device will fail to read it, as it no longer knows the encryption key.
Click to expand...
Click to collapse
Thanks for the fast reply, it's relly helpful. I just found the encryption function, it was not enabled to begin with so I guess the card should be fine. Do I have to save PIMBackup on the phone or storage card will work?
ivoniko said:
Thanks for the fast reply, it's very helpful. Where can I find the disabling encryption function by the way, I can't find that either.
Click to expand...
Click to collapse
Go to Start>Settings>System and there might be something like Encrypt Storage Card. But, I forgot that a lot of cooked ROMs leave this setting out, in which case you need not worry about it. Besides, you have to explicitly enable it, and I'm sure that if you did that you'd remember.
ivoniko said:
Thanks for the fast reply, it's relly helpful. I just found the encryption function, it was not enabled to begin with so I guess the card should be fine. Do I have to save PIMBackup on the phone or storage card will work?
Click to expand...
Click to collapse
Keep your backup files on the storage card. Otherwise, they will be wiped out in the hard reset.
OK here is why I say a clear storage is different from a hard reset. KforTP was not working on my Sprint TP2. Normally during the install, it would say something along the lines for found "xxx.dll" and then would soft reset the device. Well it was not working. I tried 3 times to clear storage each time making it seem like it was set to factory default. How ever when I installed KforTP it would never or display the found "xxx.dll". The reason I did a clear storage was because I didn't even know about the hard reset.
Did some research found that hold call and end call then the power button would hard reset the device. Did that hit vol up to confirm restored the software and then the KforTP worked like a charm.
So my only logical conclusion was that a clear storage was not wiping everything.

Which directories are preserved during a hard reset?

In W10M.
Which directories go untouched during a hard reset? Are there any?
I want to preserve files somewhere under c:\ persistently unless reflashed. How can I do that?
Thank you.
ringtones folder seem to stay intact for some reason
use ##777# for hard reset
DPP folder, this special folder have activation sim card wifi bluetoot and others if you remove it you can't get it by flashing or hard reset and your phone will be like a stone .
dxdy said:
use ##777# for hard reset
Click to expand...
Click to collapse
What type of reset would you call this or describe it as?
dicosky said:
DPP folder, this special folder have activation sim card wifi bluetoot and others if you remove it you can't get it by flashing or hard reset and your phone will be like a stone .
Click to expand...
Click to collapse
?
Thank you! Good to know. However that volume is it mounted under C: somewhere?
To delete.
DilanChd said:
Yep, but just 8MB.
---------- Post added at 21:48 ---------- Previous post was at 21:45 ----------
C:\DPP. Just redirect MTP access to C:\ or C:\DPP.
Click to expand...
Click to collapse
Not trying to mount it with MTP. Can this be mapped as accessible directory via registry for other services. Good to know it is 8mb.
C:\DPP\whatever_dir\whatever_file
UPDATE: I answered my own question. This locations is good enough for now even though small...Thanks all for the help.

TWRP Asking Password...

Earlier in OnePlus 3 days...
I have set up fingerprints to unlock my device with pattern lock.
Then ...
I had deleted ... The below mentioned files from data/system...
1. locksettings.db
2. locksettings.db-shm
3. locksettings.db-wal
4. gatekeeper.password.key
5. gatekeeper.pattern.key
Because i dont want any security on my phone but i want my fingerprints to unlock my device very quickly and after removed the above mentioned files, i did that no more secure lockscreen and fingerprints working fine.
Now... In 'OnePlus 5T'...
I have set-ups my fingerprints to unlock my device with pattern lock.
Then ...
I had deleted ... The below mentioned files from data/system...
1. locksettings.db
2. locksettings.db-shm
3. locksettings.db-wal
4. gatekeeper.password.key
5. gatekeeper.pattern.key
As i don't want any security in my phone because my family need my Phone sometimes so i want swipe up to unlock my phone and fingerprints to unlock my device very quickly but as in OnePlus 3 it was working very fine but in 'OnePlus 5T' it is not working... When i reboot my phone it is showing blank screen, no home screen only wallpaper is showing.
When i get back into TWRP recovery (Blu_Spark) it is asking me a password to unlock modification and i have deleted the lockscreen security files already though.
Any solution?
I know many of you will saying decrypt your phone.
So, i have already format data and wipe internal storage.
Still when i followed the above steps, it still ask me a password in TWRP recovery.
How to solve that issue?
Note: Please Do Not Suggest to me to entered family's member fingerprints or tell them the password or pattern as i simply mentioned above what i want.
The default password in TWRP is "default_password" (without quotation marks). You could try that...
Didgeridoohan said:
The default password in TWRP is "default_password" (without quotation marks). You could try that...
Click to expand...
Click to collapse
Thank you for the reply.
I have not tried that password but i will soon... any idea about the above first issue? Home screen is not showing anything, only showing Wallpaper of the phone?
Can someone let me know how to find the password ?
The default one (default_password) seems to not be working
Using bluespark TWRP by the way and stock Oxygen OS with fingerprint password
Not sure if the data partition is encrypted, but it sure does look like it as in TWRP file manager I can not browse in folders in sdcard properly since they folder names are hashed
Edit:
Nevermind
Removed the fingerprint and data is no longer encrypted
This is a weird one and I would still like to know how to bypass it by not always removing the fingerprint if possible
So if someone knows, feel free to reply back
Normas Interruptor said:
Thank you for the reply.
I have not tried that password but i will soon... any idea about the above first issue? Home screen is not showing anything, only showing Wallpaper of the phone?
Click to expand...
Click to collapse
I have the exact same issue!! I deleted the 5 keys and I can only see the wallpaper and it doesn't allow me to set a new pin. TWRP is asking me for a password that I never set. Did you ever figure out how to solve the problem? I would like to figure out how to decrypt my data before having to do a reformat... :crying:
CoCoGirl886 said:
I have the exact same issue!! I deleted the 5 keys and I can only see the wallpaper and it doesn't allow me to set a new pin. TWRP is asking me for a password that I never set. Did you ever figure out how to solve the problem? I would like to figure out how to decrypt my data before having to do a reformat... :crying:
Click to expand...
Click to collapse
Well, this issue only appear when you have encrypted device...
So, to get ride of this situation again... Just format data with yes command and always flash no-vrrity zip to stay decrypt now you can delete these 5 files and stay decrypted and you can use your phone without any issues.
Normas Interruptor said:
Well, this issue only appear when you have encrypted device...
So, to get ride of this situation again... Just format data with yes command and always flash no-vrrity zip to stay decrypt now you can delete these 5 files and stay decrypted and you can use your phone without any issues.
Click to expand...
Click to collapse
That will wipe my entire internal drive as well right? I don't mind using my phone encrypted, but I'd just want to get past the encryption now so that I can access and backup my files before flashing or formatting.
CoCoGirl886 said:
That will wipe my entire internal drive as well right? I don't mind using my phone encrypted, but I'd just want to get past the encryption now so that I can access and backup my files before flashing or formatting.
Click to expand...
Click to collapse
Yes! you are right, formatting data can format your entire storage including internal storage but that will be happens only once..... Install TWRP recovery by codeworkx universal and format data, that will be erase the entire storage for sure but once you done with that... copy and paste Oxygen OS ROM file along with No-verity.zip file...
first flash ROM then flash No-verity.zip so you can stay decrypted ever.
Flashing no-verity.zip all the time in every rom at last is the best practice to stay decrypted.
Normas Interruptor said:
Yes! you are right, formatting data can format your entire storage including internal storage but that will be happens only once..... Install TWRP recovery by codeworkx universal and format data, that will be erase the entire storage for sure but once you done with that... copy and paste Oxygen OS ROM file along with No-verity.zip file...
first flash ROM then flash No-verity.zip so you can stay decrypted ever.
Flashing no-verity.zip all the time in every rom at last is the best practice to stay decrypted.
Click to expand...
Click to collapse
Ah I see... the problem is that I don't have any backup of my files right now. So even if I format only once, my entire storage will be forever gone.
Did you figure out how to solve the problem of "when i reboot my phone it is showing blank screen, no home screen only wallpaper is showing" without reformatting?
CoCoGirl886 said:
Ah I see... the problem is that I don't have any backup of my files right now. So even if I format only once, my entire storage will be forever gone.
Did you figure out how to solve the problem of "when i reboot my phone it is showing blank screen, no home screen only wallpaper is showing" without reformatting?
Click to expand...
Click to collapse
You have to erase the entire storage that is the only solution... trust me i have faces this issue several times when my phone as not decrypted and i lost my entire storage almost 10 times
If you have a fingerprint set, OR a pin or password, your TWRP pass is ALWAYS the same as your phone pin or pass Just tried it on mine.
Normas Interruptor said:
You have to erase the entire storage that is the only solution... trust me i have faces this issue several times when my phone as not decrypted and i lost my entire storage almost 10 times
Click to expand...
Click to collapse
jesus christ!
McDumbdumb said:
If you have a fingerprint set, OR a pin or password, your TWRP pass is ALWAYS the same as your phone pin or pass Just tried it on mine.
Click to expand...
Click to collapse
Yup, that's the solution
LucasBass said:
Yup, that's the solution
Click to expand...
Click to collapse
Glad to get some confirmation, I was fairly certain this had worked across multiple TWRP versions, but glad to hear it works from other users
CoCoGirl886 said:
I have the exact same issue!! I deleted the 5 keys and I can only see the wallpaper and it doesn't allow me to set a new pin. TWRP is asking me for a password that I never set. Did you ever figure out how to solve the problem? I would like to figure out how to decrypt my data before having to do a reformat... :crying:
Click to expand...
Click to collapse
Same exact issue here as well. Did you ever find a solution without losing your data?
p3ric0 said:
Same exact issue here as well. Did you ever find a solution without losing your data?
Click to expand...
Click to collapse
Unfortunately no. I had to format in the end and lose 9 months of photos, data, etc :crying:.
Now I know not to mess with the lockscreen keys because the newer android versions (i think 6.0 and over) has a security patch to prevent access to phone even if you delete the keys. From now on, if your touchscreen doesn't work then your best bet is to boot into TWRP, plug in a mouse via OTG cable and try to flash a new rom, which should preserve your internal drive data.
CoCoGirl886 said:
Unfortunately no. I had to format in the end and lose 9 months of photos, data, etc :crying:.
Now I know not to mess with the lockscreen keys because the newer android versions (i think 6.0 and over) has a security patch to prevent access to phone even if you delete the keys. From now on, if your touchscreen doesn't work then your best bet is to boot into TWRP, plug in a mouse via OTG cable and try to flash a new rom, which should preserve your internal drive data.
Click to expand...
Click to collapse
Dammit I was afraid of that
I tried doing a factory reset (leaving internal storage) but now the phone gets stuck on the Welcome screen "One sec.."
My internal storage is encrypted so all the folders are hashed and I can't even recover any backups I had in the phone. ADB doesn't want to detect the device while it's in TWRP so I can't sideload adb. My only hope is to buy an OTG adapter today, put my latest twrp backup on a flashdrive, and hope I can recover that way.
Nope. The OTG adapter works but TWRP can recovery everything except data.. gives an error "extractTarFork() process ended with ERROR: 255" when I try. Sighhh
p3ric0 said:
Dammit I was afraid of that
I tried doing a factory reset (leaving internal storage) but now the phone gets stuck on the Welcome screen "One sec.."
My internal storage is encrypted so all the folders are hashed and I can't even recover any backups I had in the phone. ADB doesn't want to detect the device while it's in TWRP so I can't sideload adb. My only hope is to buy an OTG adapter today, put my latest twrp backup on a flashdrive, and hope I can recover that way.
Click to expand...
Click to collapse
You deleted the lockscreen keys from the OP right? If so, I don't think an OTG adapter would help. Because once you deleted the password then it will default to TWRP's password but it doesn't exist? However, if you never deleted the keys and can access TWRP's screen to enter your password then you should be able to decrypt and extract your backup. I had a pattern password and you can use the mouse connected to OTG cable to draw your pattern to unlock.
I'm actually having the same touchscreen issue on my device again... but the screen would randomly work. So I am waiting for it to start working before I reflash.
p3ric0 said:
Same exact issue here as well. Did you ever find a solution without losing your data?
Click to expand...
Click to collapse
CoCoGirl886 said:
You deleted the lockscreen keys from the OP right? If so, I don't think an OTG adapter would help. Because once you deleted the password then it will default to TWRP's password but it doesn't exist? However, if you never deleted the keys and can access TWRP's screen to enter your password then you should be able to decrypt and extract your backup. I had a pattern password and you can use the mouse connected to OTG cable to draw your pattern to unlock.
I'm actually having the same touchscreen issue on my device again... but the screen would randomly work. So I am waiting for it to start working before I reflash.
Click to expand...
Click to collapse
So, TWRP asking password because our Device is encrypted but when i erase the internal storage and decrypt the device then problem got solved because encryption is a culprit here.

Help! Where SD card encryption keys are stored?

So, my SD card died, I want to try to read it from PC, but I need encryption key for this.
Guides on internet says that this key is stored in /data/misc/vold directory, but, in TWRP File browser I don't see any files here at all.
Any help? Or when I tapped (forgot storage) keys was deleted?
My phone has unlocked boot loader but it is not rooted and it uses official firmware Android 8.1
Anyhow, by try and error I figured out that I lost my encryption key so my data is lost forever.
So lets this will be a lesson for others. Do not take action before thinking.

Categories

Resources