Date: Sun, 3 Mar 2013 14:29:33 +0900 From: Just Me <notsosimpleme@...il.com> To: john-users@...ts.openwall.com Subject: Re: dmg2john used and password cracked, hdiutil fails to accept it Tried vfdecrypt on macos that calls OpenSSL API, fails on EVP_DecryptFinal_ex compiled with added ERR_print_errors_fp(stderr); to show where: /vfdecrypt -v -i test.dmg -p Passwd6 -o decrypted.dmg v1 header detected. EVP Decrypt final: internal error (2) during key unwrap operation! 39213:error:06065064:lib(6):func(101):reason(100):/SourceCache/OpenSSL098/OpenSSL098-47/src/crypto/evp/evp_enc.c:330: AES Key: 00 00 00 00 a0 81 0b 6a ff 7f 00 00 a0 81 0b 6a SHA1 seed: ff 7f 00 00 d0 81 0b 6a ff 7f 00 00 18 00 00 00 00 00 00 00 25600 chunks written This error is the same for any password given, so it seems that password recovered with JtR is not the right one - which is very puzzling to me On Sun, Mar 3, 2013 at 11:45 AM, Just Me <notsosimpleme@...il.com> wrote: > On Sun, Mar 3, 2013 at 8:41 AM, Rich Rumble <richrumble@...il.com> wrote: >> Have you also tried the new dmg you created, to see if JtR is getting the >> correct pass for the new one as well? Or is the pass you have cracked (the >> forgotten one)what you expected it to be? >> -rich > > Yes, for the new one JtR gets password correctly. Forgotten password > does look like what I expected it to be. New one I tried on MacOS > 10.8.2 and the encrypted one is from 10.X G4 cpu (of course it should > nor matter). > Which I could debug it further - like what hashes are being matched
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.