Hi,
i have an old truecrypt encrypted hard disk and i accidentally let windows “fix” the device by adding a EFI GPT partition table on it.
On linux i use cryptsetup to encrypt the device:
sudo cryptsetup --type tcrypt open /dev/sdc encrypted
But calling this now prompts that now device header was found.
Is it possible to repair or recover (some of) the data on this device?
You can probably use “gdisk” to convert back to legacy partitioning.
Unfortunately, if the crypto header has been overwritten (sounds likely), then you have probably lost everything.
Yes the header was overwritten, but luckily truecrypts embeds a backup header at the end of the volume. To recover it i had use truecrypt directly (i had to put the hard disk into another pc and then had to install truecrypt, which i downloaded from a third party website), the tool provides the necessary options to use the embedded header directly and also to restore the normal header.
It seems that all my data is there, no data loss. Ideally this would have been possible using cryptsetup and not truecrypt.
A long time ago, I did recover data using “Partiton Table Doctor” but the disk was not encrypted, was surely a DOS disk and as I recall every line had an “a” at the start of the output when done. It also was not free.
Good luck
overwritten files cannot be restored
Check for file names that you know were there and be sure to include hidden files. If not found, then running a recovery software is best. There are several that have a chance to find the data. Don’t copy or install anything else on your drive.