For several days now I have tried to recover the key for an encrypted android-container (android_expand, used as internal storage) without success. As all kinds of stuff of the past years is on that card. As all other attempts failed I will try to break it with brute-force.
Yet I struggle to get the information on how the partition is actually encrypted. I took a dd image of the whole SD-card and try now to figure out what's the best way to try brute-force using bruteforce-luks as apparently it's an encrypted LUKS-container.
How do I obtain more information on how the container is encrypted? And what would be the best way to decrypt it?
Disk ANDRO.bin - 63 GB / 59 GiB - CHS 7765 255 63 Current partition structure: Partition Start End Size in sectors 1 P Unknown 2048 are 34815 32768 [android_meta] 2 P Unknown 34816 124735454 124700639 [android_expand]