germessenger.blogg.se

The post isn’t very detailed and doesn’t explain exactly how ElcomSoft pulled it off, but it does say that it is not strictly a brute force method.

Shocking, I know.Ī post on the ElcomSoft Advance Password Cracking blog claims that the company’s Advanced Office Password Recovery and Distributed Password Recovery tools now have the ability to crack Office 2013 plain text passwords, just weeks before the productivity suite’s official release.

ElcomSoft, a privately owned company headquartered in Moscow, has announced that it has already developed tools to crack Microsoft’s latest protection schemes. With Office 2013, though, Microsoft has moved to a technically more secure SHA-2 class SHA512 algorithm to calculate the hash values for the encryption keys, but it appears even that wasn’t enough. With Office 2010, Microsoft used an SHA-1 class algorithm with a 128-bit key to encrypt plain-text password-protected documents. In addition to a host of improvements and other changes, Microsoft beefed up the encryption scheme used to secure users’ data in Office 2013.