[Jingjue]

Erm it's an Excel file. Details are
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<encryption xmlns="http://schemas.microsoft.com/office/2006/encryption" xmlns:p="http://schemas.microsoft.com/office/2006/keyEncryptor/password"><keyData saltSize="16" blockSize="16" keyBits="128" hashSize="20" cipherAlgorithm="AES" cipherChaining="ChainingModeCBC" hashAlgorithm="SHA1" saltValue="8xXuDXUoJXh/tuRcKmLiqw=="/><dataIntegrity encryptedHmacKey="

[chmod]

You could try maybe a dictionary attack against it or bruteforce it

[Jingjue]

Hei, thx for the reply, but being 128bits and AES encryption it would take quite long to bruteforce right ?

[Ex094]

Hei, thx for the reply, but being 128bits and AES encryption it would take quite long to bruteforce right ?

Cracking and Brute forcing both take time and Patience, You might wanna have a good rig if you want to brute force or crack faster than normal. There are lots of tools out there you can search em via google

[zomgwtfbbq]

Hei, thx for the reply, but being 128bits and AES encryption it would take quite long to bruteforce right ?

Depends. Normally you would make a password that would be easy to remember, if you know patterns that you used for this password you can use THC_PG to make a wordlist for you. If you would crack it char by char then you'd better give up now.

[Jingjue]

Hi, thx again for the reply, and while searching, i got more curious and found this article.
http://www.eetimes.com/design/embedded-i...e-attacks-
How valid is this article. If it is true, it would take longer than 1 billion billion years to crack it ? lol ? and with the salt ? makes it even longer ? I am pretty new with all these..... any comments from experts ?

[Ex094]

Hi, thx again for the reply, and while searching, i got more curious and found this article.
http://www.eetimes.com/design/embedded-i...e-attacks-
How valid is this article. If it is true, it would take longer than 1 billion billion years to crack it ? lol ? and with the salt ? makes it even longer ? I am pretty new with all these..... any comments from experts ?

Same of what I said In my previous post, it takes times and also it won't guarantee 100% password match success.

[Coder-san]

So let me get this straight, you.. want to break a marvelous cipher like AES which is also salted, and implemented by Microsoft corporation in their one of the top selling product Microsoft Office Package's Excel?

And on top of that there is zero data you provided that confirms that it was your own document?
Ever heard of Geohot?

[Jingjue]

WOW geohot is da boss... haha omg... anyway no offence to the rest of everyone who replied, i really appreciate your comments, but Coder-San's reply is actually what i was looking for. And yes, i personally think that AES is a marvelous cipher, and with it being salted, how would brute forcing able to return me my password even if my patience is at it's maximum. Rainbow tables also wouldn't work with the salting. i mean wouldn't it take so many years that after i died, and reincarnated a few times, it would still not finish solving it. I feel that if there is a way to crack it, it would be other methods other than bruteforcing it. And also, i managed to found my password written on the papers of that module. Anyway just fyi, it's my school project which included some company data and it's graded, so yeah tt explains the password. But now that i have the password, i am still curious how can we bypass this if i haven found my password and how secure is the infomation. Anyway, Coder-San may i PM u ? anyway this is only my 4th post, soi still can't pm you yet. i would like to ask u further on encryption if you have the knowledge and willing to share. Still, Thx everyone !

---

Oh yeah.. so Coder-San i am right to say like most of all the tools and software that can be found using google, they call can't work right ?

[Coder-san]

I doubt there is any tool out there (unless it's cloud-based), which can bruteforce such password in your lifetime (or at least until you are interested in breaking such password).
But even if there is, you shouldn't talk about breaking a password of such a big organization in public. They are intellectual property, and you may get in unwanted trouble.