New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Algorythm Request Apple File Vault 2 #1028

Closed
IncognitoEntity opened this Issue Feb 7, 2017 · 6 comments

Comments

Projects
None yet
6 participants
@IncognitoEntity

IncognitoEntity commented Feb 7, 2017

I'm just wondering if it would be possible to add GPU support for apple file vault 2 within hashcat?

I recently posted about IOS backups and this implementation has been a great success. This is why I am wondering how possible it would be to add FileVault 2 to hashcat. Due to Apple Macs being encrypted by default now there is a huge need within my area to be able to use a software to try to gain access to the computers.

If I can help in any way by providing the first sectors of a FileVault 2 image let me know. There is only one software (Passware) that I know about that can do filevault 2 however again I feel hashcat developers would be able to provide a far better faster solution using GPU's

Thanks in advance

Curtis

@hcbob

This comment has been minimized.

Show comment
Hide comment
@hcbob

hcbob Feb 22, 2017

I'd like to add my support for this - I also come across a lot of FV2 encrypted Macs and having support for it in Hashcat would be great. I could also provide some volume headers and EncryptedRoot.plist.wipekey combos for research if needed.

Many thanks!

hcbob commented Feb 22, 2017

I'd like to add my support for this - I also come across a lot of FV2 encrypted Macs and having support for it in Hashcat would be great. I could also provide some volume headers and EncryptedRoot.plist.wipekey combos for research if needed.

Many thanks!

@Banaanhangwagen

This comment has been minimized.

Show comment
Hide comment
@Banaanhangwagen

Banaanhangwagen Mar 27, 2017

I am also interest in this new algorithm.
With libfvde/fdvetools it is possible to extract the hash-value.
Extra info can be found in this documentation

Apparently, jtr supports it also.
Thanks!

Banaanhangwagen commented Mar 27, 2017

I am also interest in this new algorithm.
With libfvde/fdvetools it is possible to extract the hash-value.
Extra info can be found in this documentation

Apparently, jtr supports it also.
Thanks!

@DoZ10

This comment has been minimized.

Show comment
Hide comment
@DoZ10

DoZ10 Apr 30, 2017

Contributor

According to @Banaanhangwagen Doc link, this looks like AES-XTS 128 bits.

I believe there is another Issue opened for this mode (Bitlocker for Windows 10).

KDF is PBKDFv2 with salted SHA-256 (which is already implemented).

This might be simple to implement once AES-XTS is done.

EDIT: Truecrypt and Veracrypt seem to implement XTS... perhaps this could be feasible.

Contributor

DoZ10 commented Apr 30, 2017

According to @Banaanhangwagen Doc link, this looks like AES-XTS 128 bits.

I believe there is another Issue opened for this mode (Bitlocker for Windows 10).

KDF is PBKDFv2 with salted SHA-256 (which is already implemented).

This might be simple to implement once AES-XTS is done.

EDIT: Truecrypt and Veracrypt seem to implement XTS... perhaps this could be feasible.

@Banaanhangwagen

This comment has been minimized.

Show comment
Hide comment
@mneitsabes

This comment has been minimized.

Show comment
Hide comment
@mneitsabes

mneitsabes Nov 30, 2017

I am also very interested in FileVault support. I can also provide examples if needed or perform tests.

mneitsabes commented Nov 30, 2017

I am also very interested in FileVault support. I can also provide examples if needed or perform tests.

@jsteube

This comment has been minimized.

Show comment
Hide comment
@jsteube

jsteube Jun 18, 2018

Member

Support added with c28fdf7

Member

jsteube commented Jun 18, 2018

Support added with c28fdf7

@jsteube jsteube closed this Jun 18, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment