0

I have a VeraCrypt volume which I mistakenly restored header of the volume using the backup embedded in the volume itself. It says that this process also restores the old password if exist. But I have never changed my password. So I had no problem with password.

Result: I can open and mount the volume with my current password. But when I try to read contents I get: "Sorry, could not display all the contents of “veracrypt8”: Error when getting information for file '/media/veracrypt8/r?.0�': Input/output error"

When I use ls command in the volume directory, I get random names like in this screenshot: enter image description here

Is there any way to recover my data?

ferit
  • 459
  • 3
  • 13
  • 1
    What tools exactly are you using? i.e. how do you perform the mount and what exact command you used to restore the header? – grochmal Sep 27 '16 at 19:40
  • You may have a problem with file ownership. Try a rw, set your uid and gid, then fmask and dmask to 0077 (or 0007 for group access). Also check the output from dmesg (last few line); it may tell you valuable info. – Overmind Sep 28 '16 at 05:16
  • @grochmal I am using Veracrypt 1.17 GUI for everything. Never used terminal. From GUI, `volume tools > restore header` – ferit Sep 28 '16 at 12:52
  • @Overmind Can you explain or give me a link that explains that process? I have never done it. – ferit Sep 28 '16 at 12:53
  • Your OS appear to be either some kind of Ubuntu/Mint or Fedora. It should have the `cryptsetup` utility (and if it hasn't it should be in the repos). One useful thing that `cryptsetup` can do it to print the content of the headers, i.e. with `cryptsetup --veracrypt tcryptDump `. That will give us useful info. Then instead of using the GUI, you can mount it with `cryptsetup --verbose --veracrypt tcryptOpen ` (you can assign whatever you like to ), that will also give useful info. – grochmal Sep 28 '16 at 20:04
  • @grochmal Thanks, gonna try that and share the output. – ferit Sep 28 '16 at 20:08
  • @Saibot - in short, you must check if you have proper permissions per user and per group. Do you know how to do that on the OS you use the VC volume ? The exact commands may vary depending on your OS, that's why I stated things in a more general manner. – Overmind Oct 03 '16 at 10:56
  • @Overmind I use Ubuntu. Could you give the commands or a link to a proper tutorial? – ferit Oct 04 '16 at 16:52
  • Make sure the volume that has the main file has these permissions: drwxrwsr-x (you can check that with ls -l). If they are not like that, then just use sudo chgrp and sudo chmod (sudo chmod 775) on it and finally add your username to the group you use if it's not in the group already. If the permissions are good and you still get your initial output it means your decryption key is not applied correctly. – Overmind Oct 05 '16 at 09:03
  • @Overmind It doesn't have required permissions. (drwx only) I tried to change permission but was not possible. Error says its a read-only file system. Now trying to figure out how to disable read-only thing. – ferit Oct 08 '16 at 11:34
  • @Overmind Used `sudo mount -o remount,rw '/veracrypt1'` for enabling write, without error, then `sudo chmod 775 veracrypt` without error, but still `ls -l` gives drwx. – ferit Oct 08 '16 at 12:06
  • If it's drwx then certainly the decryption key is incorrect. You should try to re-restore maybe VC will use the correct key, or find a way to manually set the used key. – Overmind Oct 10 '16 at 10:36

0 Answers0