Re: Cracking simple password encryption

["S.A.B.R.O. Net Security" <sabronet () indy rr com>]

It almost appears to be or very close to a simple Base64 scheme with 
maybe a shift or substitution somewhere.

For example, your patterns :

a        aQ==
b        cg==
c        ew==

Now heres the results of a true Base64 encrypt :

a       YQ==
b       Yg==
c       Yw==


As you see the results are very close.  Hope this helps some.


--
Sincerely,


William E. Hoover
S.A.B.R.O. Net Security Admin
www.sabronet.com
irc.sabronet.com
sabronet () indy rr com
admin () sabronet com




David Hogue wrote:

> Hi All,
>
> I am trying to figure out the password encryption scheme used by some
> software and haven't had much luck yet.  I was wondering if anyone on
> here might be able to give me some pointers.
>
> A little while ago I remember some discussion on this list (I think it
> was this list anyway) about decrypting passwords that were XOR
> encrypted.  I can't seem to find that discussion though.
>
> I have a few example passwords and I can see a pattern emerging:
>
> password        crypted
> a               aQ==
> b               cg==
> c               ew==
> aa              aWo=
> ab              aXE=
> cc              e3g=
> aaa             aWpq
> aab             aWpx
> abb             aXFx
> bbb             cnFx
>
> Thanks,
> David
>
> ---------------------------------------------------------------------------
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The Norwich University program offers unparalleled Infosec management 
> education and the case study affords you unmatched consulting experience. 
> Tailor your education to your own professional goals with degree 
> customizations including Emergency Management, Business Continuity Planning, 
> Computer Emergency Response Teams, and Digital Investigations. 
>
> http://www.msia.norwich.edu/secfocus
> ----------------------------------------------------------------------------
>
>
>  


--
Sincerely,


William E. Hoover
S.A.B.R.O. Net Security Admin
www.sabronet.com
irc.sabronet.com
sabronet () indy rr com
admin () sabronet com





---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
----------------------------------------------------------------------------