Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Sat, 14 Jul 2012 20:11:19 +0530
From: Dhiru Kholia <>
Subject: OS X Keychain format


OS X Keychain format is currently FMT_NOT_EXACT but so far, I haven't
found a single case where an invalid password resulted in correct
padding of 0x04040404 (in the decrypted data).

Also the code contains,

if(pad != 4) /* possible bug here, is this assumption always valid? */
    return -1;

Can we safely remove this comment? Any real world validation of the
Keychain format would be great.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.