WD30EZRX-00DC0B0 Smartware location

[Deki]

I have a WD30EZRX which has some damage on SA. I managed to get the important FW modules (hotswap) and prepaired the donor so I can get the data (LBA) access from patient drive.

I managed to copy almost all sectors with data (0-550MIO LBA) so all I need is Smartware partition to be able to decript the data. I have original WD USB board and it is working OK.
The problem I have is, I can't locate the Smartware partition so I am not able to decript the data/sectors I copied.

I did try hotswaping with USB board attached to PCB (via DDI4) but copy proccess is so slow and it hangs so it is not practical to do a hotswap every few minutes.
SATA copy on PC3000 was much more stable but still too slow to copy whole 3TB.

Please can you point out the LBA sectors where Smartware key/partition is located so I can copy those few MIO LBA and get the data from this drive.

Deki

[AJ2008]

Try here:

5860528160

This is for Jmicron on 3TB. If you have other bridge please list it here so I can check it.

Also, there is copy of key in SA, check module 25 (Jmicron + Initio) or 38 (Symwave)

[Deki]

It is indeed a Jmicron (JMS538S) but there is no data on that part of the disk.
Is it possible that encription key for this drive is only in module 25 and not on the disk/platter?

My image drive is also WD30EZRX so I will try to copy patient module 25 on the image drive and see what happens.

Just to clarify, I can decript the data (MFT structure and data presents decripted) if I use DDI4 and do a hotswap with USB bridge attached but problem is, that disk hangs after a few GB and I have to do a power OFF/ON procedure to continue.
DDI4 (ver 4.34) only shows one NTFS partition (status corrupted), no WD Smartware partition.

Sleep mode in DDI4 gives me error so I don't want to do hotswap with live PCB on a spinning disk anymore. It was just a test to see if decription is working.

[Deki]

Writing module 25 to target drive doesn't work. Perhaps it has to be the exact same model ?

patient: WD30EZRX-00DC0B0 Diablo3D
target: WD30EZRX-00MMMB0 Dragon

Any other ideas how to decript this drive?
Any chance of PC3000 Express decripting this model/drive without USB bridge?

Deki

[AJ2008]

open clients disk, go to last sector, then search in reverse for string '57' at offset '512/0' , and you should see a sector starting with 'WD' (ANSI) this is the key. Check the position and make sure key is copied to image destination at same position.

also, make sure LBA at both disks are identical.

Update to decrypt without bridge will be released september/october time (from what I am told)