Conversation

Any recommended readers/tools for doing a chip-off emmc extraction for a Nexus 5X emmc model: THGBMFG7C2LBAIL of package type: VFBGA153?

Replying to

Android root not enough to get the reading you need? Is it for a forensic purpose?

Replying to

The phone is dead. I'm just assuming the emmc is not.

Replying to

and

You'll need more than a dump of the storage and the encryption passphrase even on a Nexus 5X which didn't have a good implementation of hardware-supported disk encryption. It uses an odd scheme based on an RSA key stored in TrustZone storage used for signing in key derivation.

3:16 PM · Feb 6, 2019Twitter Web Client

Replying to

and

For physical extraction, the key used to encrypt the TrustZone storage would be needed. It doesn't have true hardware-bound encryption so a forensics tool could exploit TrustZone and extract that key, but I get the impression you have the passphrase so that wouldn't be helpful.

Replying to

and

Assuming that you do have the passphrase, or the person you're recovering the data for has it, the path of least resistance is likely getting the phone fixed even if that's a difficult problem to solve. Maybe even moving SoC and memory to another Nexus 5X or something similar.