Hey everyone,
A friend of mine backed up some data from a Windows box to an external hard drive, wiped the Windows drive and installed Linux with full disk encryption. Afterwards he found that he couldn't access a lot of the backed up files because they were encrypted with Windows Encrypting File System, which encrypts files with some Windows-installation specific SID keys (afaik).
Any ideas what we could try to access the data?
In this metafilter comment thread [1] somebody suggested to try to extract the SID from non-encrypted backed up files. We're going to try that. Any other ideas?
Thanks,
- Chris