Skip to content

Instantly share code, notes, and snippets.

@dfirfpi
Created May 4, 2017 22:55
Show Gist options
  • Save dfirfpi/2602b726af1b944efa723d34b624ad88 to your computer and use it in GitHub Desktop.
Save dfirfpi/2602b726af1b944efa723d34b624ad88 to your computer and use it in GitHub Desktop.
Decrypt Samsung / Seagate Secure Zone crypto container (without knowing the password... uao...).
#!/usr/bin/python
# -*- coding: utf-8 -*-
#
# Copyright 2017, Francesco "dfirfpi" Picasso <[email protected]>
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
"""Samsung Secret Zone MSR file decryptor."""
from __future__ import print_function
from Crypto.Cipher import AES
import sys
CHUNK_SIZE = 4096
HEADER_SIZE = 16384
# AES key, for different crypto algorithms, different keys.
HEADER_KEY = '\x06\x42\x21\x98\x03\x69\x5E\xB1\x5F\x40\x60\x8C\x2E\x36\x00\x06'
def main():
with open(sys.argv[1], 'rb') as input_file:
header_enc = input_file.read(HEADER_SIZE)
decryptor = AES.new(HEADER_KEY, AES.MODE_CBC, 16 * '\x00')
header_dec = decryptor.decrypt(header_enc)
body_decryption_key = header_dec[0x203c:0x204C]
print('Decoding key: {}'.format(body_decryption_key.encode('hex')))
if len(sys.argv) != 3:
print('No output file specified, giving up...')
sys.exit(0)
decryptor = AES.new(body_decryption_key, AES.MODE_ECB, 16 * '\00')
with open(sys.argv[2], 'wb') as output_file:
while True:
chunk_enc = input_file.read(CHUNK_SIZE)
if len(chunk_enc) == 0:
break
chunk_dec = decryptor.decrypt(chunk_enc)
output_file.write(chunk_dec)
sys.stdout.write('.')
sys.stdout.flush()
if __name__ == "__main__":
main()
@dfirfpi
Copy link
Author

dfirfpi commented Jan 11, 2018

@wasyleque
Copy link

how to start the script ? what are the dependencies ? I`ve got errors all the time

@wasyleque
Copy link

wasyleque commented Jan 15, 2021

C:\Users\ja\AppData\Local\Programs\Python\Python36\python.exe d:\sz\unssz.py docs.msr documents
Traceback (most recent call last):
  File "d:\sz\unssz.py", line 22, in <module>
    from Crypto.Cipher import AES
ModuleNotFoundError: No module named 'Crypto'

@artv1n
Copy link

artv1n commented Feb 1, 2021

Hello, it works! just opened my old drive.. @wasyleque you are using Python3 you need 2

@dfirfpi
Copy link
Author

dfirfpi commented Mar 11, 2021

Thanks for the feedback and I'm happy it was useful!

@Tuliogt
Copy link

Tuliogt commented Nov 22, 2023

Hi @artv1n @dfirfpi can you help to understand what is the process to open the msr files, thanks for your response!!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment