eCryptfs

error decrypting filenames home

Asked by Obed Javier

Hello, English is not my native language so I use the google translator, in advance I apologize for misunderstanding and added at the end the Spanish text.

I have problems to decrypt my encrypted home, gave a brief history:
* When I reinstall Ubuntu 10.04 just need to create my username and get my home encryption without any problems.
* When upgrading from 10.04 to 10.10, I had problems with my home, since he had no access to it. I recovered it (after 1 day looking and testing solutions without success), with a command (/home/.ecryptfs$ sudo ecryptfs-wrap-passphrase wrapped-passphrase).
* When you reinstall Ubuntu 10.10 encryption was my home without me access.
* I have already 1 week and counting, trying to recover my encrypted home.
* I have read, researched, tested various commands, including those mentioned here (in problems of others) and nothing ... at most I managed to mount my encrypted home but the filenames are encrypted.
* Only 10.04 ubuntu automatically mounts my home I encryption without any problem, but I still encrypted filenames.
* Many commands give me error, even to retrieve the passphrase, but indicating the file using the passphrase if it works (I have not forgotten my passphrase, I just tested how much solution I've seen).

With all this, any idea to decrypt the filenames?
Will this (of losing my home) with each new version of ubuntu?

There is MUCH help text by google, forums, here, etc, for these problems, but I never worked well (I get the same result as when you upgrade ubuntu), except for that command that helped me ... change the functions of the commands with each new version of encryptfs?

In advance, thanks for your patience reading and I hope your answers or ideas ... I will not lose 200GB :(

***************************************************

Hola, el ingles no es mi lengua nativa así que uso el traductor de google; de antemano me disculpo por malentendidos y agrego al final el texto en español.

Tengo problemas para desencriptar mi home cifrado, explico brevemente la historia:
* Cuando reinstalo ubuntu 10.04 solo necesito crear mi usuario y recupero mi home cifrado sin ningún problema.
* Al actualizar del 10.04 al 10.10, tuve problemas con mi home, puesto que no tenia acceso a el. con un comando (/home/.ecryptfs$ sudo ecryptfs-wrap-passphrase wrapped-passphrase) lo recuperé (después de 1 día buscando y probando soluciones sin éxito).
* Al reinstalar ubuntu 10.10 mi home seguía cifrado sin darme acceso.
* Tengo ya 1 semana y contando, tratando de recuperar mi home cifrado.
* He leído, investigado, probado diversos comandos, incluyendo los mencionados aquí (en problemas de otros usuarios) y nada... a lo mucho he conseguido montar mi home cifrado pero los nombres de archivos siguen encriptados.
* Solo ubuntu 10.04 me monta automáticamente mi home cifrado sin ningún problema, pero sigo con los nombres encriptados.
* Muchos comandos me dan error, incluso para recuperar la passphrase, pero al utilizarlo indicando el archivo de las passphrase si funciona (NO he olvidado mi passphrase, solo que he probado cuanta solución he visto).

Con todo esto, alguna idea para desencriptar los nombres de archivos?
Pasará esto (de perder mi home) con cada nueva versión de ubuntu?

Hay MUCHO texto de ayuda por google, foros, aquí, etc, para estos problemas, pero nunca me han funcionado bien (me dan el mismo resultado que cuando actualice ubuntu), salvo por ese comando que me ayudo... cambian las funciones de los comandos con cada nueva versión de encryptfs?

De antemano, gracias por su paciencia leyendo y espero sus respuestas o ideas... no quiero perder 200gb :(

Question information

Language:
English Edit question
Status:
Answered
For:
eCryptfs Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Dustin Kirkland  (kirkland) said : 		#1

Try:
 1) boot an Ubuntu 11.04 Desktop LiveCD
 2) run 'sudo ecryptfs-recover-private'

Revision history for this message
Obed Javier (reddragon-soal) said : 		#2

error ...
Recently installed the latest version of ubuntu (11.04) and gives me this problem:

prueba@Ubuntu-Inspiron-1525:~$ su - obed
Contraseña:
fopen: Permission denied
keyctl_search: Success
Perhaps try the interactive 'ecryptfs-mount-private'
To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.

obed@Ubuntu-Inspiron-1525:~$ ls
Access-Your-Private-Data.desktop Documentos obed README.txt
Descargas Imágenes Plantillas Vídeos
Desktop Música Público
obed@Ubuntu-Inspiron-1525:~$ ecryptfs-mount-private
ERROR: Encrypted private directory is not setup properly
obed@Ubuntu-Inspiron-1525:~$

Any other ideas?
thanks ...

*****************************************

error...
Recien instalé la ultima versión de ubuntu (11.04) y me da este problema:

prueba@Ubuntu-Inspiron-1525:~$ su - obed
Contraseña:
fopen: Permission denied
keyctl_search: Success
Perhaps try the interactive 'ecryptfs-mount-private'
To run a command as administrator (user "root"), use "sudo <command>".
See "man sudo_root" for details.

obed@Ubuntu-Inspiron-1525:~$ ls
Access-Your-Private-Data.desktop Documentos obed README.txt
Descargas Imágenes Plantillas Vídeos
Desktop Música Público
obed@Ubuntu-Inspiron-1525:~$ ecryptfs-mount-private
ERROR: Encrypted private directory is not setup properly
obed@Ubuntu-Inspiron-1525:~$

Alguna otra idea?
gracias...

Revision history for this message
Obed Javier (reddragon-soal) said : 		#3

obed@Ubuntu-Inspiron-1525:~$ sudo ecryptfs-recover-private
[sudo] password for obed:
INFO: Searching for encrypted private directories (this might take a while)...
INFO: Found [/home/.ecryptfs/obed/.Private].
Try to recover this directory? [Y/n]: y
INFO: Enter your LOGIN passphrase...
Passphrase:
Inserted auth tok with sig [0a0fc7d1c5fade32] into the user session keyring
ERROR: The key required to access this private data is not available.

Revision history for this message
Ted_Smith (tedsmith28) said : 		#4

I was going to suggest the same method but Dustin beat me to it.

Have you read Dustins blog entry here : http://blog.dustinkirkland.com/2011/04/introducing-ecryptfs-recover-private.html

It details full use and everything that has to be in place in order for ecryptfs-recover-private to work properly.

Revision history for this message
Obed Javier (reddragon-soal) said : 		#5

Get set up my home and decrypt filenames, but then freezes ubuntu ...

The command used is (I've only been riding my home, during the current state is lost at reboot):

prueba@Ubuntu-Inspiron-1525:~$ su - obed
Contraseña:
fopen: Permission denied
keyctl_search: Success
Perhaps try the interactive 'ecryptfs-mount-private'

obed@Ubuntu-Inspiron-1525:~$ sudo ecryptfs-add-passphrase --fnek
[sudo] password for obed:
Passphrase:
Inserted auth tok with sig [5f7cf8b99f8f0274] into the user session keyring
Inserted auth tok with sig [df89362f89c355a5] into the user session keyring

obed@Ubuntu-Inspiron-1525:~$ sudo mount -t ecryptfs /home/.ecryptfs/obed/.Private /home/obed
Passphrase:
Select cipher:
 1) aes: blocksize = 16; min keysize = 16; max keysize = 32 (not loaded)
 2) blowfish: blocksize = 16; min keysize = 16; max keysize = 56 (not loaded)
 3) des3_ede: blocksize = 8; min keysize = 24; max keysize = 24 (not loaded)
 4) cast6: blocksize = 16; min keysize = 16; max keysize = 32 (not loaded)
 5) cast5: blocksize = 8; min keysize = 5; max keysize = 16 (not loaded)
Selection [aes]:
Select key bytes:
 1) 16
 2) 32
 3) 24
Selection [16]:
Enable plaintext passthrough (y/n) [n]:
Enable filename encryption (y/n) [n]: y
Filename Encryption Key (FNEK) Signature [5f7cf8b99f8f0274]: df89362f89c355a5
Attempting to mount with the following options:
  ecryptfs_unlink_sigs
  ecryptfs_fnek_sig=df89362f89c355a5
  ecryptfs_key_bytes=16
  ecryptfs_cipher=aes
  ecryptfs_sig=5f7cf8b99f8f0274
Mounted eCryptfs

I copy the syslog

May 5 20:46:29 Ubuntu-Inspiron-1525 sudo: pam_sm_authenticate: Called
May 5 20:46:29 Ubuntu-Inspiron-1525 sudo: pam_sm_authenticate: username = [obed]
May 5 20:46:29 Ubuntu-Inspiron-1525 sudo: Passphrase file wrapped
May 5 20:46:29 Ubuntu-Inspiron-1525 sudo: Error attempting to open [/home/obed/.ecryptfs/wrapped-passphrase] for reading
May 5 20:46:29 Ubuntu-Inspiron-1525 sudo: Error attempting to unwrap passphrase from file [/home/obed/.ecryptfs/wrapped-passphrase]; rc = [-5]
May 5 20:46:29 Ubuntu-Inspiron-1525 sudo: Error adding passphrase key token to user session keyring; rc = [-5]
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.511983] Could not find key with description: [231c9e93f34a6a6b]
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.511991] process_request_key_err: No key
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.511997] ecryptfs_parse_tag_70_packet: Error attempting to find auth tok for fnek sig [231c9e93f34a6a6b]; rc = [-2]
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.512071] BUG: unable to handle kernel paging request at ffffff82
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.512165] IP: [<c12148ec>] key_put+0xc/0x30
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.514804] *pde = 01845067 *pte = 00000000
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] Oops: 0002 [#1] SMP
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] last sysfs file: /sys/devices/system/cpu/cpu1/cache/index2/shared_cpu_map
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] Modules linked in: sha256_generic cryptd aes_i586 aes_generic parport_pc ppdev dm_crypt binfmt_misc snd_hda_codec_idt snd_hda_codec_hdmi snd_hda_intel snd_hda_codec snd_hwdep snd_pcm snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq dell_wmi sparse_keymap uvcvideo r852 sm_common snd_timer nand nand_ids dell_laptop dcdbas nand_ecc lib80211_crypt_tkip xfs wl(P) joydev snd_seq_device psmouse exportfs videodev mtd snd serio_raw lib80211 soundcore snd_page_alloc lp parport i915 usbhid drm_kms_helper hid drm firewire_ohci sky2 sdhci_pci firewire_core crc_itu_t sdhci i2c_algo_bit video
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029]
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] Pid: 2057, comm: ls Tainted: P 2.6.38-8-generic #42-Ubuntu Dell Inc. Inspiron 1525 /0U990C
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] EIP: 0060:[<c12148ec>] EFLAGS: 00210286 CPU: 0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] EIP is at key_put+0xc/0x30
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] EAX: ffffff82 EBX: ef17d600 ECX: ef352fa0 EDX: f3d21e2c
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] ESI: fffffffe EDI: f3d21dfc EBP: f3d21d90 ESP: f3d21d90
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] Process ls (pid: 2057, ti=f3d20000 task=ef1dbf20 task.ti=f3d20000)
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] Stack:
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] f3d21dd8 c11fc757 c169ddf8 c152fc99 ef17d65c fffffffe 00200246 00000007
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] ef17d650 f3d21e2c f3d21e30 ef17d628 ef17d65c ef17d63c ffffff82 f1892004
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] 00000054 f3d21e30 f3d21e10 c11fa61b f1892004 ef2f6c00 0000002d ef125681
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] Call Trace:
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c11fc757>] ecryptfs_parse_tag_70_packet+0x2c7/0x580
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c11fa61b>] ecryptfs_decode_and_decrypt_filename+0xdb/0x150
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c11f3fd3>] ecryptfs_filldir+0x33/0xb0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<f924c083>] xfs_dir2_leaf_getdents+0x5e3/0x810 [xfs]
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<f9248d51>] xfs_readdir+0xe1/0xf0 [xfs]
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c11f3fa0>] ? ecryptfs_filldir+0x0/0xb0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<f927e7da>] xfs_file_readdir+0x4a/0x80 [xfs]
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c11f3fa0>] ? ecryptfs_filldir+0x0/0xb0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c1136e0e>] vfs_readdir+0x8e/0xb0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c11f3fa0>] ? ecryptfs_filldir+0x0/0xb0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c11f3f39>] ecryptfs_readdir+0x59/0xc0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c1136ac0>] ? filldir64+0x0/0xf0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c1136e0e>] vfs_readdir+0x8e/0xb0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c1136ac0>] ? filldir64+0x0/0xf0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c1136fba>] sys_getdents64+0x6a/0xc0
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] [<c1509bf4>] syscall_call+0x7/0xb
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] Code: ff 8d b6 00 00 00 00 85 ff 74 c2 8d 4d f0 89 da 89 f8 e8 e8 19 00 00 eb b4 8d b6 00 00 00 00 55 89 e5 3e 8d 74 26 00 85 c0 74 0a <f0> ff 08 0f 94 c2 84 d2 75 02 5d c3 b8 e0 90 75 c1 e8 5e 4c e5
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] EIP: [<c12148ec>] key_put+0xc/0x30 SS:ESP 0068:f3d21d90
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.516029] CR2: 00000000ffffff82
May 5 20:47:24 Ubuntu-Inspiron-1525 kernel: [ 303.711812] ---[ end trace a52f2af18c5a3264 ]---

Can you help with this problem?

Provide an answer of your own, or ask Obed Javier for more information if necessary.

To post a message you must log in.