Deleting files from an EXT4 partition does not always mean they are lost permanently. However, data recovery becomes more complex if they were encrypted with fscrypt. This file-system-level encryption mechanism protects the contents of files and directories, so standard recovery methods may not produce the expected result. In this article, we will examine how fscrypt data is stored and encrypted in EXT4, what happens to files after deletion, and which methods can be used to locate and recover them.
(more…)- 13 min. reading
- 1
-
Vladimir Artiukh
