Penetration Testing mailing list archives

[PEN-TEST] Brute Forcing MS-EFS


From: Yonatan Bokovza <Yonatan () XPERT COM>
Date: Sun, 3 Dec 2000 17:53:24 +0200

Microsoft introduced a new feature in windows 2000 that's called EFS-
"Encrypted FileSystem". I know it encrypts the data with DESX. DESX
is supposed to be a vesrion of DES, xorred with some values that are
supposed to make it encrypt a wee-bit faster, without loosing encryption
strength. Now, we all know that DES, with it's 56 bit, is too weak today,
that's why newer unices are using MD5 for the passwords.
What i'm looking for is two things:
A. More info about DESX. Is my overview correct?
B. Brute force cracker for EFS.

Best Regards,

Yonatan Bokovza
IT Security Consultant.
yonatan () xpert com
Xpert Trusted Systems
972-9-9522361
Shenkar 1, Herzlia Pituach
Israel.


Current thread: