Windows Security
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
User Name:
Password:
Remember me
Go Back   ASP Free ForumsSystem AdministrationWindows Security

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread ASP Free Forums Sponsor:
  #1  
Old March 8th, 2008, 02:35 PM
Namesniper Namesniper is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2008
Posts: 12 Namesniper User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 58 m 35 sec
Reputation Power: 0
Other - MS Office 2007 passwords

Hello,

I am not sure whether if thsi is the correct froum to post, but if its not then mods please move this thread.

I am trying to find out how Office 2007 (Word and Excel) file open passwords are stored within documents protected by a File Open password.

Is password encrypted, what algorithm(s) were used, is it hashed etc?

Reply With Quote
  #2  
Old June 17th, 2008, 03:51 AM
Nilpo's Avatar
Nilpo Nilpo is offline
ASP Free Intermediate (1500 - 1999 posts)
 
Join Date: Jun 2006
Location: Salem, OH
Posts: 1,880 Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)  Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1
Time spent in forums: 1 Week 2 Days 8 h 47 m 8 sec
Reputation Power: 967
Send a message via ICQ to Nilpo Send a message via AIM to Nilpo Send a message via MSN to Nilpo Send a message via Yahoo to Nilpo Send a message via Google Talk to Nilpo Send a message via Skype to Nilpo Send a message via XFire to Nilpo
Facebook MySpace Orkut
Since your reason for asking this information isn't completely apparent, I'm not going to answer your question completely.

I will tell you that MS Office documents use an MD5 hash after using the RC4 algorithm with a 40-bit key. However, Office XP and later allow you to change the default cryptographic setting to increase security.
__________________
Don't like me? Click it.

Scripting problems? Windows questions? Ask the Windows Guru!

Stay up to date with all of my latest content. Follow me on Twitter!

Help us help you! Post your exact error message with these easy tips!

Reply With Quote
  #3  
Old June 19th, 2008, 09:10 PM
Namesniper Namesniper is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2008
Posts: 12 Namesniper User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 58 m 35 sec
Reputation Power: 0
Quote:
Originally Posted by Nilpo
Since your reason for asking this information isn't completely apparent, I'm not going to answer your question completely.

I will tell you that MS Office documents use an MD5 hash after using the RC4 algorithm with a 40-bit key. However, Office XP and later allow you to change the default cryptographic setting to increase security.

Hi,

I didnt thought that anyoen is going to answer my question in June, thanks.

I have a software which is written in C++. Its Word/Excel password recovery software.
Its able to recover MS Office 98-2003 password but is unable to recover MSO 2007 passowrds.
Thats why i have need to know how MSO 2007 encrypts its passwords.

Reply With Quote
  #4  
Old June 20th, 2008, 01:25 AM
Nilpo's Avatar
Nilpo Nilpo is offline
ASP Free Intermediate (1500 - 1999 posts)
 
Join Date: Jun 2006
Location: Salem, OH
Posts: 1,880 Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)  Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1
Time spent in forums: 1 Week 2 Days 8 h 47 m 8 sec
Reputation Power: 967
Send a message via ICQ to Nilpo Send a message via AIM to Nilpo Send a message via MSN to Nilpo Send a message via Yahoo to Nilpo Send a message via Google Talk to Nilpo Send a message via Skype to Nilpo Send a message via XFire to Nilpo
Facebook MySpace Orkut
Well, I can't really post any more information in the open for obvious reasons. Contact me at my web site at Nilpo.com and I can give you more information.

Reply With Quote
  #5  
Old June 28th, 2008, 09:10 PM
Namesniper Namesniper is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2008
Posts: 12 Namesniper User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 58 m 35 sec
Reputation Power: 0
I have emailed you thru your website.

Reply With Quote
  #6  
Old June 29th, 2008, 04:25 AM
Nilpo's Avatar
Nilpo Nilpo is offline
ASP Free Intermediate (1500 - 1999 posts)
 
Join Date: Jun 2006
Location: Salem, OH
Posts: 1,880 Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)Nilpo User rank is General (90000 - 100000 Reputation Level)  Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1Folding Points: 214558 Folding Title: Super Ultimate Folder - Level 1
Time spent in forums: 1 Week 2 Days 8 h 47 m 8 sec
Reputation Power: 967
Send a message via ICQ to Nilpo Send a message via AIM to Nilpo Send a message via MSN to Nilpo Send a message via Yahoo to Nilpo Send a message via Google Talk to Nilpo Send a message via Skype to Nilpo Send a message via XFire to Nilpo
Facebook MySpace Orkut
Quote:
Originally Posted by Namesniper
I have emailed you thru your website.
Replied.

Reply With Quote
  #7  
Old June 29th, 2008, 09:30 AM
Namesniper Namesniper is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2008
Posts: 12 Namesniper User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 58 m 35 sec
Reputation Power: 0
Quote:
Originally Posted by Nilpo
Replied.

Strange, I didnt get it.
I have just sent the test message in response to your "auto confirmation message".

Reply With Quote
  #8  
Old June 30th, 2008, 08:27 PM
Namesniper Namesniper is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2008
Posts: 12 Namesniper User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 58 m 35 sec
Reputation Power: 0
I have PMed you.

Reply With Quote
  #9  
Old July 3rd, 2008, 09:09 PM
Namesniper Namesniper is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2008
Posts: 12 Namesniper User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 58 m 35 sec
Reputation Power: 0
It seems that you have ignored my email and PM all together.

Reply With Quote
  #10  
Old August 13th, 2009, 09:53 PM
christina2009 christina2009 is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Aug 2009
Posts: 1 christina2009 User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 10 m 7 sec
Reputation Power: 0
Quote:
Originally Posted by Nilpo
Since your reason for asking this information isn't completely apparent, I'm not going to answer your question completely.

I will tell you that MS Office documents use an MD5 hash after using the RC4 algorithm with a 40-bit key. However, Office XP and later allow you to change the default cryptographic setting to increase security.


Interesting thought, i completely agree with your perspective

Reply With Quote
  #11  
Old August 29th, 2009, 06:43 PM
Namesniper Namesniper is offline
Registered User
ASP Free Newbie (0 - 499 posts)
 
Join Date: Mar 2008
Posts: 12 Namesniper User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 58 m 35 sec
Reputation Power: 0
Quote:
Originally Posted by christina2009
Interesting thought, i completely agree with your perspective

This reply clearly states the reason.

Reply With Quote
Reply

Viewing: ASP Free ForumsSystem AdministrationWindows Security > Other - MS Office 2007 passwords


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump





 Free IT White Papers!
 
How to Present Effectively Online
This white paper offers practical and actionable advice on the key steps that any presenter should consider as they plan and execute a Webinar or online meeting.

 
Open Source Security Myths
Open Source Software (OSS) is computer software whose source code is available to the general public with relaxed or non-existent intellectual property restrictions (or arrangement such as the public domain), and is usually developed with the input of many contributors.

 
Power and Cooling Capacity Management for Data Centers
This paper describes the principles for achieving power and cooling capacity management.

 
Scalable, Fault-Tolerant NAS for Oracle - The Next Generation
For several years NAS has been evolving as a storage alternative for Oracle databases, and for good reason: NAS is quite often the simplest, most cost-effective storage approach for Oracle. Learn about the benefits that HP's approach to scalable NAS brings to Oracle environments in this comprehensive white paper.

 
Understanding Web Application Security Challenges
This white paper discusses many common threats and preventive measures for Web application security, and explains what you can do to help protect your organization.

 

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2009 by Developer Shed. All rights reserved. DS Cluster 3 Hosted by Hostway
For more Enterprise Application Development news, visit eWeek