Data Recovery · LanCologne

What should you bear in mind regarding PGP- or GPG-encrypted files following a storage device failure?

In the case of PGP- or GPG-encrypted files, simply recovering the file is not enough: to decrypt it, you need the corresponding private key and its passphrase. If the keychain is stored on the same faulty storage device, it will be recovered as part of the process.

Free enquiry

Technical background

Encrypted files are sensitive to errors: even small damaged sections can prevent them from being decrypted; in some cases, only the part following the error is unusable. In GnuPG, the private key is stored in the „.gnupg“ or „private-keys-v1.d“ directory; in other programmes, it is stored in separate keychain files.

What you should – and shouldn’t – do now

  • Find out where private keys were stored (computer, smart card, backup, password manager).
  • Do not „test“ the passphrase by trial and error on a faulty system.
  • If you have a smartcard or a hardware token, make sure you keep it safe.

Here’s how we do it

  • Recovering the encrypted files as bit-for-bit as possible.
  • Targeted search for keychain files and their backup copies.
  • Decryption is carried out by you or, at your express request, using your passphrase.

Borders

  • As things stand, it is not possible to decrypt the data without the private key and passphrase.
  • Unlike with unencrypted documents, it is not possible to read parts of damaged sections in encrypted files.

Possible results

Recovered encrypted files and, where available, the keychain – with a statement regarding their integrity.

How we carry out data recovery

Every data storage device is first diagnosed in our own laboratory in Cologne; the diagnosis is free of charge. You will then receive a written quote and can decide whether to accept it. If you decline, you can collect the data storage device from the laboratory by appointment – there are no postage costs involved – or we will post it back to you; in which case postage and packaging costs may apply. Data is recovered from copies, not from the original – using professional data recovery hardware such as the PC-3000. If a drive needs to be opened, this is carried out on a HEPA H14-filtered clean bench. We do not offer a guarantee of success prior to diagnosis, as this is simply not possible in a professional context. Your storage device and your data will remain confidential and will not be passed on to third parties.

1Enquiries and submission by post or in person at the laboratory by prior appointment
2Free diagnosis of the cause of the damage
3Written quotation – we will only proceed once you have approved it; if you decline, you may collect the item from the laboratory or we will return it to you (postage and packaging costs may apply)
4Recovery, data verification and confidential handover

Request a diagnosis   Find out more about the process, costs and confidentiality →

Frequently Asked Questions

Can you crack the passphrase?+
If the passphrase is sufficiently strong, this is practically impossible. We do not offer this as a standard service.
Is the public key sufficient?+
No, the private key is required for decryption.
What about smart cards (e.g. OpenPGP cards)?+
If the key is stored only on the card, the card is required for decryption.

Related topics

🔗 Related topics