English

Custom TWRP 3.2.3 to decrypt Android 8/9 encryption


#1

Hi,

if you have encrypted your device, you can try out this twrp here:
https://www.androidfilehost.com/?fid=1395089523397962253

Chris

Note:

To be tested:

  • Does upgrade still work with Lineage Updater?

What works:

  • Decrypt data partition (see above work-around for devices without startup pin/pwd) from Lineage 15.1 + Lineage 16.0
  • Decrypt with pin, pwd, pattern

#2

Doesn’t work for me with freshly installed LineageOS 16.0 (lineage_FP2-ota-eng.chris-20190414.zip) and encryption with a PIN (password fails, but is the correct one, LineageOS 16.0 itself decrypts fine).

Edit: Same for me with freshly installed LineageOS 15.1 (lineage-15.1-20190424-nightly-FP2-signed.zip).

Please give steps how you confirmed it’s working.


#3

Oh - that’s bad news.

You are using PIN? And you entered the PIN as if it was password, correct?

Can you send us your /tmp/recovery.log?

Chris


#4

Yes.

Yes.

recovery.log for LineageOS 15.1. encryption … https://pastebin.com/NbHYLZa3


#5

For me decrpytion using @chrmhoffmann’s new twrp is working with encrypted LineageOS 16.0 (lineage_FP2-userdebug 9 PQ2A. 190405.003 eng.chris.20190414.141757 test-keys) and a pattern. :slight_smile::+1:


#6

That’s great news, will test over the weekend :). Thank you!


#7

Here’s a new recovery.log … for a case in which decrypting LineageOS 15.1 encryption worked! … https://pastebin.com/nT2q041J

The difference to when it didn’t work:
Before entering my PIN (as the decryption password) I waited until the screen switched off and I had to turn it on and swipe to unlock TWRP again.
Confirmed this two times.

Perhaps time is a factor?


#8

Here are recovery.logs for freshly installed LineageOS 16.0 (current build) with its own encryption …

Decryption fail … https://pastebin.com/y0BtS5uW
Decryption success … https://pastebin.com/m50RtbLF

I don’t find a time relevance with 16.0 now … I got decryption to work 1 time with waiting, but now it fails every time regardless of how long I wait with entering the password.
And whether I just reboot to recovery or really turn off/on the phone doesn’t make a difference either.


#9

I can confirm the same:

Fresh Install Lineage OS 16.0, latest build from 10th May.
The above version of TWRP can not encrypt device…

Oh, what a pity.


#10

Hmmm. So it looks like it doesn’t work very reliably :slight_smile:
Chris


#11

No kidding :slight_smile: .
I can’t get this TWRP to work with 15.1. encryption again now.
Mounting my SD card seems shaky, too. Sometimes it works, more oftentimes it doesn’t.


#12

so do I understand well: We have now a official lineage version 16 but if I have encrypted the phone with lineage 14 it will not be able to decrypt my data?

An another important question: how can I go back to twrp 3.2.3-0 ?? Unfortunately I installed 3.3.0 which cannot decrypt my data partition…


#13

The custom TWRP 3.2.3 version this topic here is about can decrypt 14.1 encryption just fine … there are still problems with 15.1 and 16.0 encryption (not the same problems official TWRP 3.3.0-0 has, but problems).

Regarding LineageOS 16.0 … it currently will not work on 14.1 encryption anyway.

Just flash (or install via TWRP) the TWRP 3.2.3-0 image again, same way as you did with 3.3.0-0.


#14

To be clear, if I want to encrypt my device on LOS 16, I cannot do this reliably because from then on TWRP won’t work anymore?


#15

LineageOS 16.0 will encrypt and work this way just fine.

Official TWRP 3.2.3-0 can’t decrypt this, but will work fine apart from that.
Official TWRP 3.3.0-0 can’t decrypt anything (it seems), but will should work fine apart from that.

The custom TWRP 3.2.3 in this topic seems to be on to something, but sadly doesn’t decrypt 15.1 and 16.0 encryption reliably in every case … currently.


#16

Thing is, don’t you need TWRP to decrypt when you update the weekly update?


#17

No.
Only the data partition gets encrypted. OS updates don’t affect the data partition.
(I know Android says that it encrypts “the phone”. That’s a lie :wink: .)

If TWRP can’t decrypt the data partition, the biggest catch will be that you will not have the data partition in a TWRP backup.
And there’s of course some smaller stuff, e.g. you obviously can’t have a look at the data partition with the TWRP file manager this way.

But apart from that, TWRP will still work for installs and updates and backups of the system and cache partitions.


#18

I just encrypted my device on 16, and when I upgrade now it says update failed. From within TWRP (3.3.0) I can’t mount anything. So it isn’t possible to update to the newest firmware.


#19

So you installed LineageOS 16.0 and encrypted.
Right now there’s only one official build out for LineageOS 16.0 … what do you mean you “upgrade now”? Upgrade to what?

Can you try either official TWRP 3.2.3-0 or the custom TWRP 3.2.3 this topic is about?
Perhaps I was a bit too optimistic about the general functionality of TWRP 3.3.0-0, which I didn’t confirm myself in detail yet, but this topic isn’t about 3.3.0-0 anyway.

Firmware? Meaning the #modemfiles?


#20

Yes, I use the microG version.

I meant the OS.

Neither works, but with the 3.2.3 versions I get asked for a password. Neither my PIN nor default_password work.

What is also very odd is that when I fill in the password “default_password” it lags after the 2nd ‘s’. I need to press the 2nd ‘s’ multiple times.