data recovery symantec pgp

[pcpete]

I had a computer which has a failing hard drive along with Symantec pgp encryption. I was given the key from the client. I made a bit by bit clone, then luckily I was able to boot it her computer which allowed me to open the drive and copy the files from within Windows using her computer.

What about the majority of jobs where the computer is unbootable even after the clone?

I have some thoughts

• fully remove the decryption, then run data recovery software on it
• unlock the drive using decryption software (not removing the decryption), then run data recovery software
• unlock the drive in linux using a decryption software, then clone using ddrescue. I think the clone would be without decryption software

What are my options to getting decryption software myself? Do I need to so use Symantec pgp or are there generic versions that I can use to decrypt theses drives if I get them in the future?

 

[Markverhyden]

From what I remember if you unlock a drive and image just the main partition it is unencrypted.

When I was doing some DoD support their standard procedure was to decrypt the drive first. Personally I'd rather unlock it and grab what I can since a decryption will a) be time consuming and, most importantly, b) put the drive under additional stress since you have to process the entire surface of the drive. But, as we all know, each DR situation is different.

In regards to software. If the PGP/GPG app complies to OpenPGP then you should be able to use any version. Of course older versions may not work with newer encryptions but the reverse should be fine (backwards compatible). So updated Linux versions should work with commercial Windoze versions as long as those apps are OpenPGP compliant.

 

[pcpete]

Thanks @markverhyden , I will check out open pgp