1
$\begingroup$

I study this article: How to Hack a Mac Password Without Changing It and get interested in what hash algorithm is used for hashing user accounts passwords in macOS 10.12+?

My hypothesis is that it is PBKDF-SHA512.

$\endgroup$
  • 1
    $\begingroup$ Your question has an answer in apple.stackexchange $\endgroup$ – kelalaka Jan 28 '19 at 10:26
  • $\begingroup$ Yeah, I 've seen it but in that question people discussed 10.11 version and I think, that something may be has been changed in latest versions of macOS 10.12+. $\endgroup$ – Setplus Jan 28 '19 at 10:31
  • 1
    $\begingroup$ Well, the answer at the beginning says valid in OS 10.8 and newer $\endgroup$ – kelalaka Jan 28 '19 at 10:32
  • 1
    $\begingroup$ I'm voting to close this question as off-topic because this is more about a specific version of software, and it is therefore better answered at the site where the OS is being discussed. $\endgroup$ – Maarten Bodewes Feb 24 at 13:36
3
$\begingroup$

As @kelalaka said, the answer is still valid as described in this question, so a PBKDF2-SHA512 hash with a large salt and iteration count in the 100000's, usually.

| improve this answer | |
$\endgroup$
  • $\begingroup$ Is there any documentation about hashing user accounts passwords in macOS? for example how macOS choose number of iterations for hashing algorithm or generate random salt? $\endgroup$ – Setplus Jan 28 '19 at 10:55
  • $\begingroup$ @Setplus part of it will be in the Unix part of the source code Apple releases, I think. $\endgroup$ – Henno Brandsma Jan 28 '19 at 11:09
  • $\begingroup$ So, there are not any official documentation on number of iterations and random generator? $\endgroup$ – Setplus Jan 28 '19 at 11:31
  • $\begingroup$ @Setplus not that I’m aware of. Only this which doesn’t mention the hashing I believe. $\endgroup$ – Henno Brandsma Jan 28 '19 at 11:48
  • 1
    $\begingroup$ @kelalaka the count depends on the machine. $\endgroup$ – Henno Brandsma Jan 28 '19 at 11:53

Not the answer you're looking for? Browse other questions tagged or ask your own question.