Re: how to fight a password cracker

PDFLib obj = new PDFLib();
obj.begin_document(FileName, "masterpassword=23wdlm3ldjwld4w
permission={noprint}");

Now i wonder even that the file is encrypted using 128-bit
encryption , how a password cracker can retrieve that stored password
form the encrypted file .What operation is performed by the cracker to
remove the password and making the file accessible for all options .

Well the password is obviously very easy to retrieve from the source code or
even compiled object code (language doesn't matter here), so I suppose your
users don't have the application, but you post the output on the network
somewhere for them.

The essential problem is that if they can view data they can always copy it.
This is a fundamental law that a lot of people don't seem to understand
(i.e. DRM systems for music and video). People keep trying, with platform
security, encryption all the way to the display, etc, but if I want a
printout, I can always use a hi-res camera or scanner and there's nothing
you can do.


Can any one please help me in this ....

Regards,
Madni



.

Relevant Pages

  • Obfuscating sensitive data? (was: response to tax software not encrypting tax info)
    ... Encryption without a key is useless. ... If you can retrieve the file, brute force is always possible, so nothing ... attacker laugh, assuming he is just a bit smarter than a piece of wood. ... Never just obfuscate the passwords by using a generic key. ...
    (Bugtraq)
  • Re: Need to read "Store password in reversible encryption for all users in the domain"
    ... Wscript.Echo "Store password using reversible encryption set" ... To retrieve all users where this is set, ... You can use these filters in ADUC. ...
    (microsoft.public.windows.server.scripting)
  • Re: protecting objects from being changed
    ... After all, if the company retains a copy of the customer's key, they can always retrieve that copy. ... Maybe there is in fact a reliable encryption scheme in which two different keys can be used to decrypt an encrypted document. ... It's possible you would...I've seen some esoteric crypto stuff discussed here. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Encrypt strings at business tier
    ... Retrieve the Certificate from the KeyStore ... and then get its private key to do the encryption. ... get the public key counterpart to do the decryption. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: stolen laptop with sensitive Outlook emails
    ... If you use encryption, what's to stop someone using a password cracker on the password that is used ... car and it had personal info like SSN etc. on the Microsoft Outlook ... I know that it is very easy to get windows files even if it password ...
    (microsoft.public.outlook)
Loading