10 Replies Latest reply: Mar 2, 2010 2:57 PM by Mike3456
Mike3456 Level 1 Level 1 (0 points)
Hi,

A while ago I had a hard disk crash on my G4 powerbook. I changed the disk as it was well out of warranty. I have since purchased an external caddy for the disk and slurped off all the retrievable data, among that was a well used keychain. Because I didn't use it for a while I have only mostly remembered the password. I have enough of it in my head to reduce the search space for me, but it is still to large to do it manually. Is there a way of running something like John the ripper on it?

Mike

G4 powerbook, Mac OS X (10.4.11)
  • BDAqua Level 10 Level 10 (119,015 points)
    Hi Mike,

    Resetting your keychain in Mac OS X...

    If Keychain First Aid finds an issue that it cannot repair, or if you do not know your keychain password, you may need to reset your keychain.


    http://support.apple.com/kb/TS1544
  • Mike3456 Level 1 Level 1 (0 points)
    Hi,

    Well I already have a new keychain, and I wish to retrieve the information within the old keychain. On that apple page it states you set aside the old one when you create a new keychain, that means I would still not have access to the data in there.

    Mike
  • Mike3456 Level 1 Level 1 (0 points)
    Further to my last post, my experience matches the "update" information on this website:

    http://reviews.cnet.com/8301-13727_7-10331671-263.html

    It does not let me in to the keychain that carries the lost details I have in there.
    I am sure that the search space I have to search is a 1000 or 3 attempts, much too much to do by hand through the gui. Apples details do not tally with my experience of following apples steps to "recover" the keychain. I can see the entries in there, notes and login's etc, but unable to access any of them.

    Mike
  • BDAqua Level 10 Level 10 (119,015 points)
    9. If a dialog box appears with the message "Your Keychain password will be changed to your new account password," click OK.


    http://support.apple.com/kb/HT1274
  • Mike3456 Level 1 Level 1 (0 points)
    From the link I gave you, my experience and theirs is:

    UPDATE: Although Apple's documentation states that Keychain First Aid will synchronize the user login password with the keychain selected, *we haven't been able to make this work in practice*. If you have any additional information on performing this synch, please let us know.


    mike
  • BDAqua Level 10 Level 10 (119,015 points)
    In Keychain Access>Preferences>First Aid tab, do you have Synchronie login Keychain & Set login Keychain as Default checked when you run Keychain First Aid?

    If you have any additional information on performing this synch, please let us know.


    Just did it in another account, you have to log out & back in for effects to take place, if you just change & sync it'll require the old one until you log out & back in.
  • Mike3456 Level 1 Level 1 (0 points)
    Hi,

    Well I have just logged out and back in again, still says wrong password.
    I have exhausted this avenue, can we just let this thread lead me to a brute force technique please.

    The apple way has been tried several times now. I do remember enough about the password to make a crack feasible for me and me only on my keychain.

    Please, please let this thread cover the ways to brute force this.

    Mike
  • BDAqua Level 10 Level 10 (119,015 points)
    Apple's 256-bit AES encryption would take you around 3 x 10^51 years to brute force all...


    http://www.hackint0sh.org/f147/64481.htm

    If you find different let us know.
  • Mike3456 Level 1 Level 1 (0 points)
    Like I said,

    It is MY OWN Password I have mostly forgotten. That number is for a random attack on a random password. I remember most of the details of the password, but not enough to get 100%.

    Like I keep having to repeat, I do already know more about the password than any hacker breaking in at random

    Mike
  • Mike3456 Level 1 Level 1 (0 points)
    Still looking for an answer, lets try this another way.

    is there a command line version of logging into the keychain that I could use? I know enough of the search space to need a max of 3000 attempts to regenerate my password. Does anyone know a way to do this?