Hi Johannes,

Johannes Bauer wrote:
> Hi Jean-Pierre,
>
> On 24.09.2013 17:40, Jean-Pierre André wrote:
>
>> You may first confirm this by :
>> dd if=/dev/mapper/trycrypt1 bs=4096 skip=75092490 \
>>          count=1 | head -c 4
>> which should return "FILE", but will probably return
>> some unprintable chars.
>
> Yup:
>
> # dd if=/dev/mapper/truecrypt1 bs=4096 skip=75092490 count=1 | head -c 4
>   | hexdump
> 0000000 b836 f1e9

This is the same value as the one read by ntfsinfo,
this tends to prove ntfsinfo reacted properly on wrong
data.

>> If the full disk was encrypted, and you can read it
>> partially, I assume the encryption key is correct.
>> However when customizing the encryption, did you
>> have to enter the disk size ?
>
> No, nothing of the sort. I just said "encrypt whole drive", voilà. No
> customizing (didn't specify any offsets, sizes, partitions, anything
> like that).
>
>> Actually, what I wanted to know is the sequencing
>> of events (formatting, encrypting, installing Windows,
>> installing Linux). I would like to know why the
>> TrueCrypt directory is just near the encryption issue,
>> I do not find this consistent with a full disk encryption
>> earlier than Windows installation.
>
> The Linux installation has always been there (for about 15 years,
> probably 10 years since the last reinstallation). Windows was installed
> fairly recently on its own drive. After the installation I routinely
> employ FDE by installing TrueCrypt and encrypt the whole disk (not only
> the partition with Windows on it, but really the whole disk). Never ran
> into this issue before, so maybe something really weird is going on.
>
>>> Most curiously to me is that all content access works perfectly from
>>> within Windows and the Windows chkdsk program doesn't find any errors on
>>> the disk.
>>
>> I have no explanation so far. To understand why
>> Windows and Linux do not get the same data, maybe
>> you can download a Windows version of ntfsinfo from
>> http://jp-andre.pagesperso-orange.fr/advanced-ntfs-3g.html#download
>>
>> and compare the outputs of
>>
>> ntfsinfo -fvi 0 /dev/mapper/truecrypt1
>
> No difference on Windows and Linux.
>
>> ntfsinfo -fvi 58368 /dev/mapper/truecrypt1
>> (this one will fail...)
>
> Linux fails:
>
> ntfs_mst_post_read_fixup_warn: magic: 0xf1e9b836  size: 1024   usa_ofs:
> 59978  usa_count: 60275: Invalid argument
> Record 58368 has no FILE magic (0xf1e9b836)
> Error loading node: Input/output error
>
> Windows succeeds:
>
> Dumping Inode 58368 (0xe400)
> Upd. Seq. Array Off.:  48 (0x30)

[...]

>
> Same thing for inode 60166; Linux:
>
> ntfs_mst_post_read_fixup_warn: magic: 0xa0b1926a  size: 1024   usa_ofs:
> 47168  usa_count: 36485: Invalid argument
> Record 60166 has no FILE magic (0xa0b1926a)
> Error loading node: Input/output error
>
> and Windows:
>
> Dumping Inode 60166 (0xeb06)
> Upd. Seq. Array Off.:  48 (0x30)
> Upd. Seq. Array Count:         3 (0x3)

[...]

>
>> If this succeeds, the issue does not lie in ntfs-3g...

The ntfsinfo for Linux and Windows is the same program
(compiled differently), and it does not get the same
data on Linux and Windows, so the issue is elsewhere.

I had thought you might have some partial cacheing of
the hard disk on a SSD (known to behave differently on
Windows and Linux), where Windows gets the hard disk
data and Linux the SSD one, but you are mentioning an
old Linux installation, so this is very unlikely.

I have no other suggestions.

> Jean-Pierre, I sincerely thank you for helping me with this one and I
> agree that the problem doesn't lie within ntfs-3g. I'll try to track it
> down on the Truecrypt mailing list and see if I have any luck there.

Good luck. If you find some useful conclusion, please
share it.

Regards

Jean-Pierre

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60133471&iu=/4140/ostg.clktrk
_______________________________________________
ntfs-3g-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ntfs-3g-devel

Reply via email to