password fails in encrypted disk image

I created a 300 mb encrypted disk image using 10.4.x, about 9 months ago, now I am running 10.5.2 and everytime I try to open the image and type in the password (the correct password I have been using for years) iI get an authentification error. I know Im using the correct password, any ideas what happened here. Could the image be corupted but still want me to authenticate?
I have not tried to open the file since Dec. 17th (via last modified date) I have check all the permissions on the eternal drive where the file is stored... also ran Techtool on the drive and found no errors... I am out of ideas...

iMac 24 Core 2 duo 2.8 Ext, Mac OS X (10.5.2)

Posted on Apr 12, 2008 4:25 PM

Reply
8 replies

Apr 12, 2008 5:09 PM in response to brianmw

Are you absolutely sure caps lock wasn't on when you entered the password?

If it isn't that, open a terminal window and drag the following line into it:

hdiutil attach -debug

Make sure there is a space at the end of the line. Now drag the icon of the disk image into the window, then hit return. You should be prompted to enter the password. Either the image will mount, or you will get an error message.

If this doesn't help, try installing 10.4 on a spare hard drive and booting from it. Now can you mount the image?

If none of this works, either the image is corrupt in some very unusual way, or the password is not what you think it is. There are tools for cracking the password of an encrypted disk image (search for "vilefault") but your chances of success with that are slim, unless the password is very weak. If you have an older version of the same image that does mount, you could try this:

http://lorenzo.yellowspace.net/corrupt-sparseimage.html

Beyond that, there is no back door, at least none that is known publicly.

Apr 16, 2008 4:16 AM in response to Linc Davis

I tried to ope in 10.4.x no luck... this is the log I get when I ran the line you asked me too...
I get one line of red code in terminal about halfway down I have cut and pasted that line here:
CEncryptedEncoding::copyHeaderInformation: backingStore data fork length is 0x00000048800004FC (311385130236)
PS No caps lock on, same password as my login was used and I added a 1 to the end of it.


Last login: Mon Apr 14 20:59:36 on console
Mac-mini:~ bmw$ hdiutil attach -debug /Volumes/320M/Backup.dmg
calling DIHLDiskImageAttach with
agent: hdiutil
drive-options:
debug: true
image-options:
verbose: false
quiet: false
main-url: /Volumes/320M/Backup.dmg
2008-04-16 07:07:58.781 hdiutil[3671:1c03] using helper tool at "/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-he lper".
2008-04-16 07:07:58.812 hdiutil[3671:1c03] connectToFramework
2008-04-16 07:07:58.913 hdiutil[3671:1c03] sendOperationToHelper: about to ask proxy to start operation
status proc called: initialize
2008-04-16 07:07:58.945 diskimages-helper[3673:1603] _imageOptions: {
"enable-keychain" = 1;
}
2008-04-16 07:07:58.947 diskimages-helper[3673:1603] _driveOptions: {
autodiskmount = 1;
"unmount-timeout" = 0;
}
2008-04-16 07:07:58.947 diskimages-helper[3673:1603] DIHelperAttach: initializing framework
DILoadDriver: checking for disk image driver...DILoadDriver: DI_kextExists() returned 0x00000000 (0)...DIIsInitialized: returning NO2008-04-16 07:07:58.967 diskimages-helper[3673:1603] -checkForPreviouslyAttachedImage: entry
2008-04-16 07:07:58.971 diskimages-helper[3673:1603]


file://localhost/Volumes/320M/Backup.dmg - (null) ((null), (null)). perm=0
DIIsInitialized: returning YESDIBackingStoreNewWithCFURL: entry with
file://localhost/Volumes/320M/Backup.dmg
skip-permissions-check: true
DIBackingStoreInstantiatorProbe: entry
file://localhost/Volumes/320M/Backup.dmg
skip-permissions-check: true
DIBackingStoreInstantiatorProbe: probing interface 0 CBSDBackingStore
CBSDBackingStore::newProbe score 100 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 1 CBundleBackingStore
CBundleBackingStore::newProbe score -1000 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 2 CRAMBackingStore
CRAMBackingStore::probe: scheme "file": not ram: or ramdisk: scheme.
CRAMBackingStore::probe: score -1000 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 3 CCarbonBackingStore
CCarbonBackingStore::newProbe: setting initial rval to +100
CCarbonBackingStore::newProbe score 100 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 4 CDevBackingStore
CDevBackingStore::newProbe: not /dev/disk or /dev/rdisk (/Volumes/320M/Backup.dmg).CDevBackingStore::newProbe score -1000 for
DIBackingStoreInstantiatorProbe: probing interface 5 CCURLBackingStore
CCURLBackingStore::probe: scheme is
file
CCURLBackingStore::probe: not recognized URL scheme.
CCURLBackingStore::probe: score -1000 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 6 CVectoredBackingStore
CVectoredBackingStore::newProbe not "vectored" scheme.
CVectoredBackingStore::newProbe score -1000 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreNewWithCFURL: CBSDBackingStore
DIBackingStoreNewWithCFURL: instantiator returned 0
DIBackingStoreNewWithCFURL: returning 0x00000000
2008-04-16 07:07:58.974 diskimages-helper[3673:1603] -checkForPreviouslyAttachedImage: resolving file://localhost/Volumes/320M/Backup.dmg returned 0
2008-04-16 07:07:58.974 diskimages-helper[3673:1603] -checkForPreviouslyAttachedImage: imageUID (
"d234881062:i31"
) shadowUID (null)
*** testing:
0: d234881026:i1241264
(null)
(null)
*** testing:
0: d234881026:i1241264
(null)
(null)
*** testing:
0: d234881026:i1241264
(null)
(null)
2008-04-16 07:07:59.009 diskimages-helper[3673:1603] DIHelperAttach: resolving disk image
DIIsInitialized: returning YESDIIsInitialized: returning YESDIBackingStoreNewWithCFURL: entry with
file://localhost/Volumes/320M/Backup.dmg
enable-keychain: true
image-path: /Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: entry
file://localhost/Volumes/320M/Backup.dmg
enable-keychain: true
image-path: /Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 0 CBSDBackingStore
CBSDBackingStore::newProbe score 100 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 1 CBundleBackingStore
CBundleBackingStore::newProbe score -1000 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 2 CRAMBackingStore
CRAMBackingStore::probe: scheme "file": not ram: or ramdisk: scheme.
CRAMBackingStore::probe: score -1000 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 3 CCarbonBackingStore
CCarbonBackingStore::newProbe: setting initial rval to +100
CCarbonBackingStore::newProbe score 100 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 4 CDevBackingStore
CDevBackingStore::newProbe: not /dev/disk or /dev/rdisk (/Volumes/320M/Backup.dmg).CDevBackingStore::newProbe score -1000 for
DIBackingStoreInstantiatorProbe: probing interface 5 CCURLBackingStore
CCURLBackingStore::probe: scheme is
file
CCURLBackingStore::probe: not recognized URL scheme.
CCURLBackingStore::probe: score -1000 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreInstantiatorProbe: probing interface 6 CVectoredBackingStore
CVectoredBackingStore::newProbe not "vectored" scheme.
CVectoredBackingStore::newProbe score -1000 for file://localhost/Volumes/320M/Backup.dmg
DIBackingStoreNewWithCFURL: CBSDBackingStore
opening /Volumes/320M/Backup.dmg setPermission 1741
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing /Volumes/320M/Backup.dmg setPermission 1749
DIBackingStoreNewWithCFURL: instantiator returned 0
DIBackingStoreNewWithCFURL: returning 0x00000000
DIResolveURLToBackingStore: processing level 1 encodings.
DIFileEncodingNewWithBackingStore: entry for encoding level 1
DIFileEncodingInstantiatorProbe: entry for level 1
enable-keychain: true
image-path: /Volumes/320M/Backup.dmg
DIFileEncodingInstantiatorProbe: probing level 1 interface 0 CMacBinaryEncoding
CBSDBackingStore::openDataFork: about to open /Volumes/320M/Backup.dmg
opening /Volumes/320M/Backup.dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing 3 /Volumes/320M/Backup.dmg closeDataFork 2002
00000000: 6693 930e 2f5e cf8b 939f 6ce7 0152 4aed | f.../^....l..RJ. |
00000010: 863b 399a f951 0eed 3aa9 6f76 2b74 7fd1 | .;9..Q..:.ov+t.. |
00000020: 991a f7c5 e50d 6f38 cb85 9f7a 3a4f fd64 | ......o8...z:O.d |
00000030: 9b2d 2c2a 72da ecf1 9f7d fca7 0194 63f4 | .-,*r....}....c. |
00000040: faa9 3802 a655 5b4a be98 d7c0 80c6 f401 | ..8..U[J........ |
00000050: 7abf fefb 1d73 e1f2 eab5 11d2 219b fc6f | z....s......!..o |
00000060: 494f 4c33 2c52 9800 7db1 919f 7227 0c19 | IOL3,R..}...r'.. |
00000070: 4629 57ad 4a75 f4b8 9860 15ec 0521 76e1 | F)W.Ju...`...!v. |
diskimages-helper: fileNameLength $00000093
diskimages-helper: resourceForkLength $F2EAB511
diskimages-helper: dataForkLength $FB1D73E1
diskimages-helper: commentLength $0000332C
diskimages-helper: MacBinary III signature ? (0x98007DB1)
diskimages-helper: header CRC $00000521
diskimages-helper: minimum decoder version $000000EC
diskimages-helper: encoder version $00000015
no MacBinary III signature - checking for MacBinary I or IIDIFileEncodingInstantiatorProbe: probing level 1 interface 1 CAppleSingleEncoding
CBSDBackingStore::openDataFork: about to open /Volumes/320M/Backup.dmg
opening /Volumes/320M/Backup.dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
00000000: 0e93 9366 8bcf 5e2f 939f 6ce7 0152 4aed | ...f..^/..l..RJ. |
00000010: 863b 399a f951 0eed a93a 6f76 2b74 7fd1 | .;9..Q...:ov+t.. |
00000020: 991a f7c5 e50d .... .... .... .... .... | ................ |
closing 3 /Volumes/320M/Backup.dmg closeDataFork 2002
CAppleSingleEncoding::isAppleSingleFile loadAppleSingleHeader failed with error 22
DIFileEncodingInstantiatorProbe: probing level 1 interface 2 CEncryptedEncoding
CBSDBackingStore::openDataFork: about to open /Volumes/320M/Backup.dmg
opening /Volumes/320M/Backup.dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->openDataFork returned 0
CEncryptedEncoding::copyHeaderInformation: inBackingStore->getDataForkLength (stub header) returned 0
CEncryptedEncoding::copyHeaderInformation: backingStore data fork length is 0x00000048800004FC (311385130236)
CEncryptedEncoding::copyHeaderInformation: reading V1 header from offset 0x0000004880000000 (311385128960)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (stub header) returned 0
closing 3 /Volumes/320M/Backup.dmg closeDataFork 2002
uuid: 29B92E9E-C8BA-493A-AD63-2603ED9B3C79
blocksize: 4096
encrypted-file-version: 1
CBSDBackingStore::openDataFork: about to open /Volumes/320M/Backup.dmg
opening /Volumes/320M/Backup.dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing 3 /Volumes/320M/Backup.dmg closeDataFork 2002
diskimages-helper: DiskImages secure mode enabled
UNLOCK: cannot find passphrase in keychain search list.
UNLOCK: SessionGetInfo returned 0
UNLOCK: sessionHasGraphicAccess
UNLOCK: sessionHasTTY
UNLOCK: sessionWasInitialized
UNLOCK: using TTY to prompt for passphrase
Enter password to access "Backup.dmg":
unlockCoreFromTTY: passphrase is wrong
DIFileEncodingNewWithBackingStore: returning 0x00000050
DIResolveURLToBackingStore: level 1 encoding match failed. 80.
DIResolveURLToDiskImage: resolving backing store/file encoding failed. 80.
status proc called: attach
error code: 80
status proc called: cleanup
2008-04-16 07:08:58.867 diskimages-helper[3673:1603] DIHelperAttach performOperation: returning 80
2008-04-16 07:08:58.874 diskimages-helper[3673:10b] DIHelper reportresults: reporting {
payload = {
};
"result-code" = 80;
}
2008-04-16 07:08:58.876 hdiutil[3671:1c03] reportResultsToFramework: proxy has finished operation
2008-04-16 07:08:58.878 hdiutil[3671:1c03] reportResultsToFramework: results are: {
payload = {
};
"result-code" = 80;
}
2008-04-16 07:08:58.880 hdiutil[3671:1c03] reportResultsToFramework: _threadResultsError is 80
2008-04-16 07:08:58.882 hdiutil[3671:1c03] reportResultsToFramework: disconnecting from helper.
2008-04-16 07:08:58.874 diskimages-helper[3673:1603] -decrementBackgroundThreadCount: _backgroundThreadCount is now 0.
2008-04-16 07:08:58.983 hdiutil[3671:1c03] disconnectFromHelper: removing observers
2008-04-16 07:08:58.984 hdiutil[3671:1c03] disconnectFromHelper: terminating proxy
2008-04-16 07:08:58.986 diskimages-helper[3673:10b] DIHelper: terminateHelper: entry.
2008-04-16 07:08:58.987 hdiutil[3671:1c03] disconnectFromHelper: terminated proxy
2008-04-16 07:08:59.087 diskimages-helper[3673:10b] -DIHelperAgentMaster terminateUIAgentConnection.
DIHLDiskImageAttach() returned 80
2008-04-16 07:08:59.090 diskimages-helper[3673:10b] DIHelper dealloc.
2008-04-16 07:08:59.091 diskimages-helper[3673:10b] -DIHelperAgentMaster terminateUIAgentConnection.
hdiutil: attach failed - Authentication error
Mac-mini:~ bmw$

Apr 16, 2008 12:16 PM in response to Linc Davis

I have encountered the same problem on two protected disk image files today. Last week, everything was still working fine, and today my password is no longer recognised. The password is absolutely correct, lower case and everything but still it fails to accept it.

This is my log:

noname:~ wm$ hdiutil attach -debug /Users/wm/Desktop/TAN\ \(original\).dmg
calling DIHLDiskImageAttach with
agent: hdiutil
drive-options:
debug: true
image-options:
verbose: false
quiet: false
main-url: /Users/wm/Desktop/TAN (original).dmg
2008-04-16 21:14:52.282 hdiutil[664:1c03] using helper tool at "/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-he lper".
2008-04-16 21:14:52.309 hdiutil[664:1c03] connectToFramework
2008-04-16 21:14:52.410 hdiutil[664:1c03] sendOperationToHelper: about to ask proxy to start operation
status proc called: initialize
2008-04-16 21:14:52.441 diskimages-helper[666:1603] _imageOptions: {
"enable-keychain" = 1;
}
2008-04-16 21:14:52.442 diskimages-helper[666:1603] _driveOptions: {
autodiskmount = 1;
"unmount-timeout" = 0;
}
2008-04-16 21:14:52.443 diskimages-helper[666:1603] DIHelperAttach: initializing framework
DILoadDriver: checking for disk image driver...DILoadDriver: DI_kextExists() returned 0x00000000 (0)...DIIsInitialized: returning NO2008-04-16 21:14:52.462 diskimages-helper[666:1603] -checkForPreviouslyAttachedImage: entry
2008-04-16 21:14:52.462 diskimages-helper[666:1603]


file://localhost/Users/wm/Desktop/TAN%20(original).dmg - (null) ((null), (null)). perm=0
DIIsInitialized: returning YESDIBackingStoreNewWithCFURL: entry with
file://localhost/Users/wm/Desktop/TAN%20(original).dmg
skip-permissions-check: true
DIBackingStoreInstantiatorProbe: entry
file://localhost/Users/wm/Desktop/TAN%20(original).dmg
skip-permissions-check: true
DIBackingStoreInstantiatorProbe: probing interface 0 CBSDBackingStore
CBSDBackingStore::newProbe score 100 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 1 CBundleBackingStore
CBundleBackingStore::newProbe score -1000 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 2 CRAMBackingStore
CRAMBackingStore::probe: scheme "file": not ram: or ramdisk: scheme.
CRAMBackingStore::probe: score -1000 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 3 CCarbonBackingStore
CCarbonBackingStore::newProbe: setting initial rval to +100
CCarbonBackingStore::newProbe score 100 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 4 CDevBackingStore
CDevBackingStore::newProbe: not /dev/disk or /dev/rdisk (/Users/wm/Desktop/TAN (original).dmg).CDevBackingStore::newProbe score -1000 for
DIBackingStoreInstantiatorProbe: probing interface 5 CCURLBackingStore
CCURLBackingStore::probe: scheme is
file
CCURLBackingStore::probe: not recognized URL scheme.
CCURLBackingStore::probe: score -1000 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 6 CVectoredBackingStore
CVectoredBackingStore::newProbe not "vectored" scheme.
CVectoredBackingStore::newProbe score -1000 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreNewWithCFURL: CBSDBackingStore
DIBackingStoreNewWithCFURL: instantiator returned 0
DIBackingStoreNewWithCFURL: returning 0x00000000
2008-04-16 21:14:52.467 diskimages-helper[666:1603] -checkForPreviouslyAttachedImage: resolving file://localhost/Users/wm/Desktop/TAN%20(original).dmg returned 0
2008-04-16 21:14:52.468 diskimages-helper[666:1603] -checkForPreviouslyAttachedImage: imageUID (
"d234881026:i10934606"
) shadowUID (null)
2008-04-16 21:14:52.471 diskimages-helper[666:1603] DIHelperAttach: resolving disk image
DIIsInitialized: returning YESDIIsInitialized: returning YESDIBackingStoreNewWithCFURL: entry with
file://localhost/Users/wm/Desktop/TAN%20(original).dmg
enable-keychain: true
image-path: /Users/wm/Desktop/TAN (original).dmg
DIBackingStoreInstantiatorProbe: entry
file://localhost/Users/wm/Desktop/TAN%20(original).dmg
enable-keychain: true
image-path: /Users/wm/Desktop/TAN (original).dmg
DIBackingStoreInstantiatorProbe: probing interface 0 CBSDBackingStore
CBSDBackingStore::newProbe score 100 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 1 CBundleBackingStore
CBundleBackingStore::newProbe score -1000 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 2 CRAMBackingStore
CRAMBackingStore::probe: scheme "file": not ram: or ramdisk: scheme.
CRAMBackingStore::probe: score -1000 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 3 CCarbonBackingStore
CCarbonBackingStore::newProbe: setting initial rval to +100
CCarbonBackingStore::newProbe score 100 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 4 CDevBackingStore
CDevBackingStore::newProbe: not /dev/disk or /dev/rdisk (/Users/wm/Desktop/TAN (original).dmg).CDevBackingStore::newProbe score -1000 for
DIBackingStoreInstantiatorProbe: probing interface 5 CCURLBackingStore
CCURLBackingStore::probe: scheme is
file
CCURLBackingStore::probe: not recognized URL scheme.
CCURLBackingStore::probe: score -1000 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreInstantiatorProbe: probing interface 6 CVectoredBackingStore
CVectoredBackingStore::newProbe not "vectored" scheme.
CVectoredBackingStore::newProbe score -1000 for file://localhost/Users/wm/Desktop/TAN%20(original).dmg
DIBackingStoreNewWithCFURL: CBSDBackingStore
opening /Users/wm/Desktop/TAN (original).dmg setPermission 1741
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing /Users/wm/Desktop/TAN (original).dmg setPermission 1749
DIBackingStoreNewWithCFURL: instantiator returned 0
DIBackingStoreNewWithCFURL: returning 0x00000000
DIResolveURLToBackingStore: processing level 1 encodings.
DIFileEncodingNewWithBackingStore: entry for encoding level 1
DIFileEncodingInstantiatorProbe: entry for level 1
enable-keychain: true
image-path: /Users/wm/Desktop/TAN (original).dmg
DIFileEncodingInstantiatorProbe: probing level 1 interface 0 CMacBinaryEncoding
CBSDBackingStore::openDataFork: about to open /Users/wm/Desktop/TAN (original).dmg
opening /Users/wm/Desktop/TAN (original).dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing 3 /Users/wm/Desktop/TAN (original).dmg closeDataFork 2002
00000000: 656e 6372 6364 7361 0000 0002 0000 0010 | encrcdsa........ |
00000010: 0000 0005 8000 0001 0000 0100 0000 005b | ...............[ |
00000020: 0000 00a0 881d 6855 7a93 4255 ae22 e84f | ......hUz.**.".O |
00000030: a228 1379 0000 1000 0000 0000 0280 0000 | .(.y............ |
00000040: 0000 0000 0001 e000 0000 0001 0000 0001 | ................ |
00000050: 0000 0000 0000 0060 0000 0000 0000 0268 | .......`.......h |
00000060: 0000 0067 0000 0000 0000 03e8 0000 0014 | ...g............ |
00000070: fb8e f5cc 6401 aa32 fa4f a4e7 9891 9162 | ....d..2.O.....b |
diskimages-helper: fileNameLength $0000006E
diskimages-helper: resourceForkLength $60000000
diskimages-helper: dataForkLength $00000000
diskimages-helper: commentLength $00006700
diskimages-helper: MacBinary III signature (0x00000000)
diskimages-helper: header CRC $00009891
diskimages-helper: minimum decoder version $000000E7
diskimages-helper: encoder version $000000A4
no MacBinary III signature - checking for MacBinary I or IIDIFileEncodingInstantiatorProbe: probing level 1 interface 1 CAppleSingleEncoding
CBSDBackingStore::openDataFork: about to open /Users/wm/Desktop/TAN (original).dmg
opening /Users/wm/Desktop/TAN (original).dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
00000000: 7263 6e65 6173 6463 0000 0002 0000 0010 | rcneasdc........ |
00000010: 0000 0005 8000 0001 0000 0100 0000 005b | ...............[ |
00000020: 0000 00a0 881d .... .... .... .... .... | ................ |
closing 3 /Users/wm/Desktop/TAN (original).dmg closeDataFork 2002
CAppleSingleEncoding::isAppleSingleFile loadAppleSingleHeader failed with error 22
DIFileEncodingInstantiatorProbe: probing level 1 interface 2 CEncryptedEncoding
CBSDBackingStore::openDataFork: about to open /Users/wm/Desktop/TAN (original).dmg
opening /Users/wm/Desktop/TAN (original).dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->openDataFork returned 0
CEncryptedEncoding::copyHeaderInformation: inBackingStore->getDataForkLength (stub header) returned 0
CEncryptedEncoding::copyHeaderInformation: backingStore data fork length is 0x000000000281E000 (42065920)
CEncryptedEncoding::copyHeaderInformation: reading V1 header from offset 0x000000000281DB04 (42064644)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (stub header) returned 0
CEncryptedEncoding::copyHeaderInformation: not recognized as v1 header
CEncryptedEncoding::copyHeaderInformation: reading V2 header from offset 0x0000000000000000 (0)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (stub header) returned 0
CEncryptedEncoding::copyHeaderInformation: reading auth-entry count from offset 0x0000000000000048 (72)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (auth entry count) returned 0
CEncryptedEncoding::copyHeaderInformation: reading auth table from offset 0x0000000000000048 (72)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (auth entry count) returned 0
closing 3 /Users/wm/Desktop/TAN (original).dmg closeDataFork 2002
max-key-count: 1
blocksize: 4096
uuid: 881D6855-7A93-4255-AE22-E84FA2281379
version: 2
passphrase-count: 1
private-key-count: 0
CBSDBackingStore::openDataFork: about to open /Users/wm/Desktop/TAN (original).dmg
opening /Users/wm/Desktop/TAN (original).dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing 3 /Users/wm/Desktop/TAN (original).dmg closeDataFork 2002
CBSDBackingStore::openDataFork: about to open /Users/wm/Desktop/TAN (original).dmg
opening /Users/wm/Desktop/TAN (original).dmg openDataFork 1922
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing 3 /Users/wm/Desktop/TAN (original).dmg closeDataFork 2002
diskimages-helper: DiskImages secure mode enabled
CEncryptedEncoding:unclock CANTHROW: trying to unlock with normal keychain
UNLOCK: cannot find passphrase in keychain search list.
UNLOCK: SessionGetInfo returned 0
UNLOCK: sessionHasGraphicAccess
UNLOCK: sessionHasTTY
UNLOCK: sessionWasInitialized
UNLOCK: using TTY to prompt for passphrase
Geben Sie das Kennwort ein, um auf „TAN (original).dmg“ zuzugreifen:
unlockCoreFromTTY: passphrase is wrong
DIFileEncodingNewWithBackingStore: returning 0x00000050
DIResolveURLToBackingStore: level 1 encoding match failed. 80.
DIResolveURLToDiskImage: resolving backing store/file encoding failed. 80.
status proc called: attach
error code: 80
status proc called: cleanup
2008-04-16 21:15:01.383 diskimages-helper[666:1603] DIHelperAttach performOperation: returning 80
2008-04-16 21:15:01.384 diskimages-helper[666:1603] -decrementBackgroundThreadCount: _backgroundThreadCount is now 0.
2008-04-16 21:15:01.387 diskimages-helper[666:10b] DIHelper reportresults: reporting {
payload = {
};
"result-code" = 80;
}
2008-04-16 21:15:01.390 hdiutil[664:1c03] reportResultsToFramework: proxy has finished operation
2008-04-16 21:15:01.391 hdiutil[664:1c03] reportResultsToFramework: results are: {
payload = {
};
"result-code" = 80;
}
2008-04-16 21:15:01.392 hdiutil[664:1c03] reportResultsToFramework: _threadResultsError is 80
2008-04-16 21:15:01.393 hdiutil[664:1c03] reportResultsToFramework: disconnecting from helper.
2008-04-16 21:15:01.497 hdiutil[664:1c03] disconnectFromHelper: removing observers
2008-04-16 21:15:01.498 hdiutil[664:1c03] disconnectFromHelper: terminating proxy
2008-04-16 21:15:01.500 diskimages-helper[666:10b] DIHelper: terminateHelper: entry.
2008-04-16 21:15:01.502 hdiutil[664:1c03] disconnectFromHelper: terminated proxy
2008-04-16 21:15:01.602 diskimages-helper[666:10b] -DIHelperAgentMaster terminateUIAgentConnection.
DIHLDiskImageAttach() returned 80
2008-04-16 21:15:01.611 diskimages-helper[666:10b] DIHelper dealloc.
2008-04-16 21:15:01.619 diskimages-helper[666:10b] -DIHelperAgentMaster terminateUIAgentConnection.
hdiutil: attach failed - Identifizierungsfehler
noname:~ wm$

Message was edited by: sapnho

Apr 17, 2008 6:56 AM in response to sapnho

The output of hdiutil says that there's nothing wrong with the image header, or with the system, but the password you gave doesn't match the stored hash. I guess there could be a bug that corrupts only that part of the header while leaving everything else alone, but then I'd expect many reports of the same problem, and I've seen none apart from this thread. Or if there was something wrong with the hash-checking code, then you wouldn't be able to mount any encrypted images, but you say that you can. All I can tell you is that there's no way to extract data from an encrypted disk image without the password, at least no way known outside Apple and maybe the NSA.

May 12, 2008 3:29 PM in response to brianmw

I have encountered the same problem on two protected disk image files as well. Once in January and then again a few days ago.

I first thought that the first lockout was a fluke. Now after the second image lockout I'm very vary of opening another encrypted backup. I'm losing data. Even copies of the .dmg on different drives fail to authenticate. Searching for answers I found this thread.

Is it possible that a kernel panic / forced shutdown can corrupt an encrypted file? I wonder, but my encrypted home directory (FileVault sparsebundle) is fine.

Any insights would be appreciated.



This is my log:

Last login: Sun May 11 07:35:13 on ttys000
kevin:~ kevin$ hdiutil attach -debug /Volumes/kevin/busted.dmg calling DIHLDiskImageAttach with
agent: hdiutil
drive-options:
debug: true
image-options:
verbose: false
quiet: false
main-url: /Volumes/kevin/busted.dmg
2008-05-12 18:11:17.015 hdiutil[1745:1c03] using helper tool at "/System/Library/PrivateFrameworks/DiskImages.framework/Resources/diskimages-he lper".
2008-05-12 18:11:17.040 hdiutil[1745:1c03] connectToFramework
2008-05-12 18:11:17.141 hdiutil[1745:1c03] sendOperationToHelper: about to ask proxy to start operation
status proc called: initialize
2008-05-12 18:11:17.173 diskimages-helper[1747:1603] _imageOptions: {
"enable-keychain" = 1;
}
2008-05-12 18:11:17.176 diskimages-helper[1747:1603] _driveOptions: {
autodiskmount = 1;
"unmount-timeout" = 0;
}
2008-05-12 18:11:17.178 diskimages-helper[1747:1603] DIHelperAttach: initializing framework
DILoadDriver: checking for disk image driver...DILoadDriver: DI_kextExists() returned 0x00000000 (0)...DIIsInitialized: returning NO2008-05-12 18:11:17.188 diskimages-helper[1747:1603] -checkForPreviouslyAttachedImage: entry
2008-05-12 18:11:17.189 diskimages-helper[1747:1603]


file://localhost/Volumes/kevin/busted.dmg - (null) ((null), (null)). perm=0
DIIsInitialized: returning YESDIBackingStoreNewWithCFURL: entry with
file://localhost/Volumes/kevin/busted.dmg
skip-permissions-check: true
DIBackingStoreInstantiatorProbe: entry
file://localhost/Volumes/kevin/busted.dmg
skip-permissions-check: true
DIBackingStoreInstantiatorProbe: probing interface 0 CBSDBackingStore
CBSDBackingStore::newProbe score 100 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 1 CBundleBackingStore
CBundleBackingStore::newProbe score -1000 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 2 CRAMBackingStore
CRAMBackingStore::probe: scheme "file": not ram: or ramdisk: scheme.
CRAMBackingStore::probe: score -1000 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 3 CCarbonBackingStore
CCarbonBackingStore::newProbe: setting initial rval to +100
CCarbonBackingStore::newProbe: has resource fork, +100
CCarbonBackingStore::newProbe score 200 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 4 CDevBackingStore
CDevBackingStore::newProbe: not /dev/disk or /dev/rdisk (/Volumes/kevin/busted.dmg).CDevBackingStore::newProbe score -1000 for
DIBackingStoreInstantiatorProbe: probing interface 5 CCURLBackingStore
CCURLBackingStore::probe: scheme is
file
CCURLBackingStore::probe: not recognized URL scheme.
CCURLBackingStore::probe: score -1000 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 6 CVectoredBackingStore
CVectoredBackingStore::newProbe not "vectored" scheme.
CVectoredBackingStore::newProbe score -1000 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreNewWithCFURL: CCarbonBackingStore
DIBackingStoreNewWithCFURL: instantiator returned 0
DIBackingStoreNewWithCFURL: returning 0x00000000
2008-05-12 18:11:17.190 diskimages-helper[1747:1603] -checkForPreviouslyAttachedImage: resolving file://localhost/Volumes/kevin/busted.dmg returned 0
2008-05-12 18:11:17.191 diskimages-helper[1747:1603] -checkForPreviouslyAttachedImage: imageUID (
"d234881039:i8914"
) shadowUID (null)
*** testing:
0: d234881039:i9111
(null)
(null)
*** testing:
0: d234881039:i9111
(null)
(null)
*** testing:
0: d234881039:i9111
(null)
(null)
2008-05-12 18:11:17.194 diskimages-helper[1747:1603] DIHelperAttach: resolving disk image
DIIsInitialized: returning YESDIIsInitialized: returning YESDIBackingStoreNewWithCFURL: entry with
file://localhost/Volumes/kevin/busted.dmg
enable-keychain: true
image-path: /Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: entry
file://localhost/Volumes/kevin/busted.dmg
enable-keychain: true
image-path: /Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 0 CBSDBackingStore
CBSDBackingStore::newProbe score 100 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 1 CBundleBackingStore
CBundleBackingStore::newProbe score -1000 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 2 CRAMBackingStore
CRAMBackingStore::probe: scheme "file": not ram: or ramdisk: scheme.
CRAMBackingStore::probe: score -1000 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 3 CCarbonBackingStore
CCarbonBackingStore::newProbe: setting initial rval to +100
CCarbonBackingStore::newProbe: has resource fork, +100
CCarbonBackingStore::newProbe score 200 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 4 CDevBackingStore
CDevBackingStore::newProbe: not /dev/disk or /dev/rdisk (/Volumes/kevin/busted.dmg).CDevBackingStore::newProbe score -1000 for
DIBackingStoreInstantiatorProbe: probing interface 5 CCURLBackingStore
CCURLBackingStore::probe: scheme is
file
CCURLBackingStore::probe: not recognized URL scheme.
CCURLBackingStore::probe: score -1000 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreInstantiatorProbe: probing interface 6 CVectoredBackingStore
CVectoredBackingStore::newProbe not "vectored" scheme.
CVectoredBackingStore::newProbe score -1000 for file://localhost/Volumes/kevin/busted.dmg
DIBackingStoreNewWithCFURL: CCarbonBackingStore
opening /Volumes/kevin/busted.dmg setPermission 1723
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing /Volumes/kevin/busted.dmg setPermission 1731
DIBackingStoreNewWithCFURL: instantiator returned 0
DIBackingStoreNewWithCFURL: returning 0x00000000
DIResolveURLToBackingStore: processing level 1 encodings.
DIFileEncodingNewWithBackingStore: entry for encoding level 1
DIFileEncodingInstantiatorProbe: entry for level 1
enable-keychain: true
image-path: /Volumes/kevin/busted.dmg
DIFileEncodingInstantiatorProbe: probing level 1 interface 0 CMacBinaryEncoding
CBSDBackingStore::openDataFork: about to open /Volumes/kevin/busted.dmg
opening /Volumes/kevin/busted.dmg openDataFork 1904
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing 3 /Volumes/kevin/busted.dmg closeDataFork 1984
00000000: 656e 6372 6364 7361 0000 0002 0000 0010 | encrcdsa........ |
00000010: 0000 0005 8000 0001 0000 0100 0000 005b | ...............[ |
00000020: 0000 00a0 548a 2877 86c1 4f17 877b cf66 | ....T.(w..O..{.f |
00000030: beea 6066 0000 1000 0000 0002 780e 1734 | ..`f........x..4 |
00000040: 0000 0000 0001 e000 0000 0001 0000 0001 | ................ |
00000050: 0000 0000 0000 0060 0000 0000 0000 0268 | .......`.......h |
00000060: 0000 0067 0000 0000 0000 03e8 0000 0014 | ...g............ |
00000070: d369 cd83 75e8 bb7c 72e5 020d fdd3 68a9 | .i..u..|r.....h. |
diskimages-helper: fileNameLength $0000006E
diskimages-helper: resourceForkLength $60000000
diskimages-helper: dataForkLength $00000000
diskimages-helper: commentLength $00006700
diskimages-helper: MacBinary III signature (0x00000000)
diskimages-helper: header CRC $0000FDD3
diskimages-helper: minimum decoder version $0000000D
diskimages-helper: encoder version $00000002
no MacBinary III signature - checking for MacBinary I or IIDIFileEncodingInstantiatorProbe: probing level 1 interface 1 CAppleSingleEncoding
CBSDBackingStore::openDataFork: about to open /Volumes/kevin/busted.dmg
opening /Volumes/kevin/busted.dmg openDataFork 1904
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
00000000: 7263 6e65 6173 6463 0000 0002 0000 0010 | rcneasdc........ |
00000010: 0000 0005 8000 0001 0000 0100 0000 005b | ...............[ |
00000020: 0000 00a0 548a .... .... .... .... .... | ....T........... |
closing 3 /Volumes/kevin/busted.dmg closeDataFork 1984
CAppleSingleEncoding::isAppleSingleFile loadAppleSingleHeader failed with error 22
DIFileEncodingInstantiatorProbe: probing level 1 interface 2 CEncryptedEncoding
CBSDBackingStore::openDataFork: about to open /Volumes/kevin/busted.dmg
opening /Volumes/kevin/busted.dmg openDataFork 1904
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->openDataFork returned 0
CEncryptedEncoding::copyHeaderInformation: inBackingStore->getDataForkLength (stub header) returned 0
CEncryptedEncoding::copyHeaderInformation: backingStore data fork length is 0x0000000278100000 (10604249088)
CEncryptedEncoding::copyHeaderInformation: reading V1 header from offset 0x00000002780FFB04 (10604247812)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (stub header) returned 0
CEncryptedEncoding::copyHeaderInformation: not recognized as v1 header
CEncryptedEncoding::copyHeaderInformation: reading V2 header from offset 0x0000000000000000 (0)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (stub header) returned 0
CEncryptedEncoding::copyHeaderInformation: reading auth-entry count from offset 0x0000000000000048 (72)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (auth entry count) returned 0
CEncryptedEncoding::copyHeaderInformation: reading auth table from offset 0x0000000000000048 (72)
CEncryptedEncoding::copyHeaderInformation: inBackingStore->readDataFork (auth entry count) returned 0
closing 3 /Volumes/kevin/busted.dmg closeDataFork 1984
max-key-count: 1
blocksize: 4096
uuid: 548A2877-86C1-4F17-877B-CF66BEEA6066
version: 2
passphrase-count: 1
private-key-count: 0
CBSDBackingStore::openDataFork: about to open /Volumes/kevin/busted.dmg
opening /Volumes/kevin/busted.dmg openDataFork 1904
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing 3 /Volumes/kevin/busted.dmg closeDataFork 1984
CBSDBackingStore::openDataFork: about to open /Volumes/kevin/busted.dmg
opening /Volumes/kevin/busted.dmg openDataFork 1904
CBSDBackingStore::OpenLockFriendly: mapping flags 0x00000002 -> 0x00000026 (locks are MANDATORY)
(RW lock acquired)
closing 3 /Volumes/kevin/busted.dmg closeDataFork 1984
diskimages-helper: DiskImages secure mode enabled
CEncryptedEncoding:unclock CANTHROW: trying to unlock with normal keychain
UNLOCK: cannot find passphrase in keychain search list.
UNLOCK: SessionGetInfo returned 0
UNLOCK: sessionHasGraphicAccess
UNLOCK: sessionHasTTY
UNLOCK: sessionWasInitialized
UNLOCK: using TTY to prompt for passphrase
Enter password to access "busted.dmg":
unlockCoreFromTTY: passphrase is wrong
DIFileEncodingNewWithBackingStore: returning 0x00000050
DIResolveURLToBackingStore: level 1 encoding match failed. 80.
DIResolveURLToDiskImage: resolving backing store/file encoding failed. 80.
status proc called: attach
error code: 80
status proc called: cleanup
2008-05-12 18:11:41.081 diskimages-helper[1747:1603] DIHelperAttach performOperation: returning 80
2008-05-12 18:11:41.082 diskimages-helper[1747:1603] -decrementBackgroundThreadCount: _backgroundThreadCount is now 0.
2008-05-12 18:11:41.082 diskimages-helper[1747:10b] DIHelper reportresults: reporting {
payload = {
};
"result-code" = 80;
}
2008-05-12 18:11:41.083 hdiutil[1745:1c03] reportResultsToFramework: proxy has finished operation
2008-05-12 18:11:41.084 hdiutil[1745:1c03] reportResultsToFramework: results are: {
payload = {
};
"result-code" = 80;
}
2008-05-12 18:11:41.084 hdiutil[1745:1c03] reportResultsToFramework: _threadResultsError is 80
2008-05-12 18:11:41.085 hdiutil[1745:1c03] reportResultsToFramework: disconnecting from helper.
2008-05-12 18:11:41.186 hdiutil[1745:1c03] disconnectFromHelper: removing observers
2008-05-12 18:11:41.187 hdiutil[1745:1c03] disconnectFromHelper: terminating proxy
2008-05-12 18:11:41.189 diskimages-helper[1747:10b] DIHelper: terminateHelper: entry.
2008-05-12 18:11:41.190 hdiutil[1745:1c03] disconnectFromHelper: terminated proxy
2008-05-12 18:11:41.290 diskimages-helper[1747:10b] -DIHelperAgentMaster terminateUIAgentConnection.
DIHLDiskImageAttach() returned 80
2008-05-12 18:11:41.293 diskimages-helper[1747:10b] DIHelper dealloc.
2008-05-12 18:11:41.294 diskimages-helper[1747:10b] -DIHelperAgentMaster terminateUIAgentConnection.
hdiutil: attach failed - Authentication error
kevin:~ kevin$

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

password fails in encrypted disk image

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.