My laptop (Ubuntu 12.04) stopped mounting my encrypted home drive today after several months of working fine. I have been using the same login password since I set up the encrypted home drive a few months back with no issues. /var/log/syslog
is showing that it is an Incorrect wrapping key
for my wrapped passphrase. I figure this means that my wrap-passphrase file is corrupted and is no longer valid. I have my mount passphrase password from when I encrypted the home drive.
I booted from LiveCD and executed the following process:
root@ubuntu:/media/backup/home/me# ecryptfs-recover-private
INFO: Searching for encrypted private directories (this might take a while)...
INFO: Found [/media/backup/home/.ecryptfs/me/.Private].
Try to recover this directory? [Y/n]: Y
INFO: Found your wrapped-passphrase
Do you know your LOGIN passphrase? [Y/n] n
INFO: To recover this directory, you MUST have your original MOUNT passphrase.
INFO: When you first setup your encrypted private directory, you were told to record
INFO: your MOUNT passphrase.
INFO: It should be 32 characters long, consisting of [0-9] and [a-f].
Enter your MOUNT passphrase:
INFO: Success! Private data mounted read-only at [/tmp/ecryptfs.COf2NZVr].
However, when I cd
to the tmp
folder (i.e. cd /tmp/ecryptfs.COf2NZVr
), all I see are encrypted files (ECRYPTFS_FNEK_ENCRYPTED.F...
). Based on the question/answer located under ecryptfs-recover-private creating unreadable encrypted folders, it appears they fixed this issue with using the login passphrase. However, as I already pointed out, my login passphrase is not working.
Since the mounted Passphrase is partially working (it allows me to mount up in /tmp
the files successfully) is there anything else I can do to get these files unencrypted? Any help would be appreciated.
dmesg
& /var/log/syslog for any messages about filename encryption / fnek