Word file password question

[jono-ats]

A friend called and said one of his clients used a password to lock a Microsoft Word file, and forgot it.

Does the password become part of an encryption key? Is there any solution without the known PW?

[Cleanroom]

What version of word is the file created in.

[CK]

You'll probably need Thunder Tables for a recent MS word file.

[einstein9]

You'll probably need Thunder Tables for a recent MS word file.

Disagree with you, will take no more than 2min. MAX.

[CK]

Disagree with you, will take no more than 2min. MAX.

Care to elaborate? Unless there's something I don't know about that doesn't involve a rainbow table or brute force attack, then I don't agree with you but I stand to be corrected...

[fzabkar]

A friend called and said one of his clients used a password to lock a Microsoft Word file, and forgot it.

Does the password become part of an encryption key? Is there any solution without the known PW?

http://www.petri.co.il/recover-word-2010-password.htm

Otherwise ask Google:
http://www.google.com/search?q=%22micro ... k+OR+crack

"About 1,930,000 results"

[einstein9]

Disagree with you, will take no more than 2min. MAX.

Care to elaborate? Unless there's something I don't know about that doesn't involve a rainbow table or brute force attack, then I don't agree with you but I stand to be corrected...

Passware

[CK]

Passware might find it with a dictionary attack in 2 minutes but not if it's a complex password or above Office 2003.

[jono-ats]

Thank you for your helpful replies.

I referred the client directly to Cleanroom, who contacted us with more info.

Jono

[loki]

Passware might find it with a dictionary attack in 2 minutes but not if it's a complex password or above Office 2003.

Passware Kit Enterprise and Passware Kit Forensic utilize Amazon Elastic Compute Cloud (EC2) a highly scalable cloud computing platform for accelerated password recovery.
That should speed up the process.

Loki

[CK]

That was my point Loki, "regular" PW cracking is not sufficient. You need tables or GPU processing.

Anyway, that's all I have to say about the topic

[Doomer]

From what I know Office 2010 does 100000 SHA1 hashings (50000 for Office 2007) to the passphrase before using it as an encryption key in AES128 encryption
Even with Compute Cloud it will be very long brute force process

Unless you client is using very simple password

[Doomer]

http://blog.crackpassword.com/2009/07/o ... re-secure/

[einstein9]

From what I know Office 2010 does 100000 SHA1 hashings (50000 for Office 2007) to the passphrase before using it as an encryption key in AES128 encryption
Even with Compute Cloud it will be very long brute force process

Unless you client is using very simple password

Most of the Office work regular people set simple passwords = easier cracking
if you look @ it from this point you will find the answer and it does work based on my experience.
Unless someone who want to play FBI and sets a complex one.

[CK]

if you look @ it from this point you will find the answer and it does work based on my experience.

So, you are wrong then? Your original reply suggested that you would get the password in 2 minutes. This was based on the probability that the password was something easy like "password1"? What if the password was $"£%FSDJFXDJ$"-19e492()&*?? I hope you aren't charging $50 for password cracking

[einstein9]

if you look @ it from this point you will find the answer and it does work based on my experience.

So, you are wrong then? Your original reply suggested that you would get the password in 2 minutes. This was based on the probability that the password was something easy like "password1"? What if the password was $"£%FSDJFXDJ$"-19e492()&*?? I hope you aren't charging $50 for password cracking

Most of the Office work regular people set simple passwords = easier cracking

[hddguy]

Most of the Office work regular people set simple passwords = easier cracking

This is the reason people dont set simple passwords....

[einstein9]

up till now, and more specific in Office docs. i never had any problem with it maybe lucky

but also consider regular people set easy password to remember not using pass. generators as the sample provided on prev. post

whatever is the case, i guess no need to go any more discussing this issue, will not lead anywhere right

[Doomer]

Most of the Office work regular people set simple passwords = easier cracking

How many percent is the "most"
And how short/easy are the "simple passwords"
I would like to see this statistics

[Doomer]

I can set VjqK.mbvsqGfhjkm password and it will be almost impossible to crack but very easy for me to remember because it's Russian phrase typed on English keyboard

One can take a phrase from a movie and add some digits/symbols inside and dictionary attack will be very limited
Example: TheMatr1xHasUNeo