Search found 3 matches

by rakali
30 Dec 2019, 05:56
Forum: File undelete
Topic: need to recover keychain from apfs
Replies: 3
Views: 9408

Re: need to recover keychain from apfs

I've tried recovery with a couple of other tools and they both have the same behaviour. The login.keychain file is all 0000. I am wondering if this is a security element at play here?
by rakali
29 Dec 2019, 22:38
Forum: File undelete
Topic: need to recover keychain from apfs
Replies: 3
Views: 9408

Re: need to recover keychain from apfs

thanks for getting back to me.

fidentify says 'login.keychain-db: unknown'. Is it necessary to upload a keychain file? I would prefer not to.

from a little cursory searching, it looks like an encrypted sqlite database. i can read some of the schema in a hex editor, such as "CSSM_DL_DB_SCHEMA ...
by rakali
29 Dec 2019, 11:49
Forum: File undelete
Topic: need to recover keychain from apfs
Replies: 3
Views: 9408

need to recover keychain from apfs

long story short! i keep encrypted .dmg of my boot disk. i thought i had saved the password, but apparently. ow.

if i can recover the keychain from unencrypted apfs volume, i hope my password is inside. i know my keychain password of course

the ssd has already been overwritten with debian and ...