RE: CIPHER.EXE

Tech-Archive recommends: Fix windows errors by optimizing your registry



Hi Bob,
You can try to copy the file from a nother machine or from a CD, or you can
use one of these tools:
http://technet.microsoft.com/en-us/sysinternals/bb545046.aspx

# MoveFile:
Schedule file rename and delete commands for the next reboot. This can be
useful for cleaning stubborn or in-use malware files.

# PendMoves:
See what files are scheduled for delete or rename the next time the system
boots.

# SDelete:
Securely overwrite your sensitive files and cleanse your free space of
previously deleted files using this DoD-compliant secure delete program.

HTH,
nass
---
http://www.nasstec.co.uk

"WhatAboutBob" wrote:

nass...Thanks for the help. However, I checked all those directories you
listed and cipher is not there. The information that it was there came from
here: http://support.microsoft.com/kb/827014

However, I think I mistakenly assumed that Windows XP included the Home
Edition.

Next question...any idea on how I can add cipher to the home edition?

Thanks again.
WhatAboutBob

"nass" wrote:



"WhatAboutBob" wrote:

I have Windows XP Home edition version 5.1 with service pack 3

I cannot find the cipher.exe program. I was told it is included in service
pack 3, which I have.

Can anyone tell me where to find it in the computer (i.e., which folder it
is in)?.

Or, where can I download a version that will run on Windows XP (I found a
site for downloading but it says it's for Windows 2000.

Thanks.

If you opened the local search on your computer and typed in:
CIPHER.EXE
You will find it in these directories:
c:\windows\system32\cipher.exe 55kb
C:\Windows\ServicePackFiles\i386
C:\Windows\SoftwareDistribution\SelfUpdate
C:\Windpows\Prefetch

Open a run command and type in:
cmd click [OK]
On the command prompt type cipher /? Hit Enter on your keyboard. The
output will be this:
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\USER>cipher /?
Displays or alters the encryption of directories [files] on NTFS partitions.

CIPHER [/E | /D] [/S:directory] [/A] [/I] [/F] [/Q] [/H] [pathname [...]]

CIPHER /K

CIPHER /R:filename

CIPHER /U [/N]

CIPHER /W:directory

CIPHER /X[:efsfile] [filename]

/A Operates on files as well as directories. The encrypted file
could become decrypted when it is modified if the parent
directory is not encrypted. It is recommended that you encrypt
the file and the parent directory.
/D Decrypts the specified directories. Directories will be marked
so that files added afterward will not be encrypted.
/E Encrypts the specified directories. Directories will be marked
so that files added afterward will be encrypted.
/F Forces the encryption operation on all specified objects, even
those which are already encrypted. Already-encrypted objects
are skipped by default.
/H Displays files with the hidden or system attributes. These
files are omitted by default.
/I Continues performing the specified operation even after errors
have occurred. By default, CIPHER stops when an error is
encountered.
/K Creates new file encryption key for the user running CIPHER. If
this option is chosen, all the other options will be ignored.
/N This option only works with /U. This will prevent keys being
updated. This is used to find all the encrypted files on the
local drives.
/Q Reports only the most essential information.
/R Generates an EFS recovery agent key and certificate, then writes
them to a .PFX file (containing certificate and private key) and
a .CER file (containing only the certificate). An administrator
may add the contents of the .CER to the EFS recovery policy to
create the recovery agent for users, and import the .PFX to
recover individual files.
/S Performs the specified operation on directories in the given
directory and all subdirectories.
/U Tries to touch all the encrypted files on local drives. This
will
update user's file encryption key or recovery agent's key to the
current ones if they are changed. This option does not work with
other options except /N.
/W Removes data from available unused disk space on the entire
volume. If this option is chosen, all other options are ignored.
The directory specified can be anywhere in a local volume. If it
is a mount point or points to a directory in another volume, the
data on that volume will be removed.
/X Backup EFS certificate and keys into file filename. If efsfile
is
provided, the current user's certificate(s) used to encrypt the
file will be backed up. Otherwise, the user's current EFS
certificate and keys will be backed up.


directory A directory path.
filename A filename without extensions.
pathname Specifies a pattern, file or directory.
efsfile An encrypted file path.

Used without parameters, CIPHER displays the encryption state of
the current directory and any files it contains. You may use multiple
directory names and wildcards. You must put spaces between multiple
parameters.

C:\Documents and Settings\User>

You can use the bove commands/Switches on your Clusters to overwrite
deleted data and..etc.
HTH,
nass
---
http://www.nasstec.co.uk

.

Relevant Pages

  • Re: Cannot access files using backed-up EFS key...
    ... recovery software. ... do you mean Windows XP Support or something else? ... some time learning about encryption before you try to encrypt anything else ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Should Initialization Vectors be public ?
    ... CBC XORes every previous cipher block with next plain text block before ... encryption key on the same plain text, ... add them at the beginning of your plaintext data ...
    (microsoft.public.dotnet.security)
  • RE: CIPHER.EXE
    ... I think I mistakenly assumed that Windows XP included the Home ... Next question...any idea on how I can add cipher to the home edition? ... Displays or alters the encryption of directories on NTFS partitions. ... may add the contents of the .CER to the EFS recovery policy to ...
    (microsoft.public.windowsxp.general)
  • Re: Should Initialization Vectors be public ?
    ... > CBC XORes every previous cipher block with next plain text block before ... Chaining and feedback modes does provide extra strength to ... > encryption key on the same plain text, ... >>>> then to decrypt. ...
    (microsoft.public.dotnet.security)
  • Re: cryptoloop CBC mode
    ... >> identical it could be the case that two would get same encryption. ... For such blocks you will know exactly which bits differ ... and the two IVs are different. ... > the key will still be the same (ok, different cipher output, but the ...
    (comp.os.linux.security)