hashcat Forum

Hi all,

i have a passworded dmg file, created with latest MacOSX.
I tried to extract the hash using the jtr tool ( dmg2john ) but when i open the hash into hashcat i get the "end of line" error.

The file generated from dmg2john is far longer than any hash from the example page so i'm wondering if there is a method to make it compatible with hashcat.

hashcat does not support dmg, and there's nothing you can do to trick it into working with dmg.

further, the "hash" that is extracted with dmg2john is not a hash at all. there is no stored password hash. the user's password is passed through a key derivation function which generates a key that is used to decrypt the image. the "hash" that you see from dmg2john is all of the bits necessary to determine the kdf settings and to verify a successful decryption.