Protect Yourself from Lost Passwords -- Redmondmag.com

Protect Yourself from Lost Passwords

ElcomSoft reliably recovers ZIP passwords.

By Mike Gunderloy
12/01/2001

ElcomSoft makes password recovery utilities for a variety of file formats: Microsoft Office, Lotus SmartSuite, Adobe Acrobat, and others. They sent me a copy of their Advanced Archive Password Recovery utility, which handles the task of determining passwords for ZIP, RAR, ARJ, and other archive files.

The program uses a variety of means to extract files from password-protected archives, including brute force, dictionary, and known-plaintext attacks. It can also exploit weaknesses in some of the encryption algorithms. It took from 15 minutes to six hours on the files I threw at it, on a relatively fast machine—but it succeeded in decrypting the archives.

This brings two conclusions to mind. First, if you happen to be faced with an encrypted archive that you legally own (perhaps it was left behind by an ex-employee), there's an effective way in. Second, I wouldn't trust archive encryption to protect anything terribly sensitive.

About the Author

Mike Gunderloy, MCSE, MCSD, MCDBA, is a former MCP columnist and the author of numerous development books.

Featured

Using Configuration Files to Control PowerShell Scripts, Part 2: Building Blocks

Learn how to use PowerShell's GUI capabilities to dynamically create configuration files that enhance script flexibility and usability.
U.S. House Leaders Unveil Bipartisan Strategy for AI Governance and Innovation

On Tuesday, U.S. House Speaker Mike Johnson and Democratic Leader Hakeem Jeffries received the final report from the bipartisan House Task Force on Artificial Intelligence, which outlines essential principles and recommendations to bolster American leadership in AI.
Using Configuration Files to Control PowerShell Scripts, Part 1: The Basics

Learn how to use JSON configuration files to make PowerShell scripts more dynamic, flexible and user-friendly.
Exchange Online Receiving Enhanced Message Trace

Microsoft has announced the public preview of its enhanced Message Trace feature in the Exchange admin center (EAC) for Exchange Online.
Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.