I recently messed up with my McAfee Encrypted Laptop (2 Drives) and got MBR overwritten by Linux (Ubuntu). I used DETech CD on C: but after 2% it failed due to Bad Sector. Using a safety precaution i have cloned the drives using Clonezilla and the D:> i have restored onto the Virtual Hard Disk (VHD)

I have also kept VHD file for decryption using a VirtualBox and DETech ISO but takes lots and lots of time.

  1. I'm Looking out for a Windows/Linux Tool which can take VHD file as an input and Decrypt it with 256 AES Algorithm.

  2. What are the best Data recovery Tools.


For the first question you can use openssl for decryption:

$ openssl enc <MODE> <ENC/DECRYPT> -in <INPUT_FILE> -out <OUTPUT_FILE>

As an example:

 $ openssl enc -aes-256-cbc -d -in encrypted.VHD -out decrypted.VHD

See this list of system recovery tools for linux distributions: SystemRescueCD, gddrescue and testdisk.

The later can be found in the main repository in ubuntu/debian:

$ sudo apt get install gddrescue testdisk
  • openssl will decrypt a Hard Drive encrypted with a Mcafee End point encryption ? i'm sure on the algorithm but the command mentioned nowhere mentioens the Key used... – Mitesh Manani Jul 26 '15 at 16:11
  • Yes, as long as it's using a standard implementation of AES. The key is requested upon running openssl(in the form of a password). – Sebi Jul 26 '15 at 16:15
  • Wow ! This is a news to me. Ill definately try this.Many Thanks ! – Mitesh Manani Jul 26 '15 at 16:22
  • Sorry, but this will most likely not work. You are attempting to use a CBC algorithm without knowing how to align your blocks. You are working with raw data, if you are off by a single byte, it won't work. – Nate Jul 26 '15 at 19:24
  • @Francois Renaud-Philippon The ciphertext is assumed to be obtained using standard AES, meaning that all blocks are already aligned. – Sebi Jul 26 '15 at 19:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.