Shoutbox

Well, that may be true however, someone with the knowledge to do a brute force checker wouldn't need the info on this post anyway... and, if you're that worries that someone is going to brute force the password in your logs, you should probably choose a more complicated password (with only 8 characters you generally have a good enough protection anyway).

And as for brute forcing 30 million passwords a second: that's absolutely impossible to do with the crypto api, the access is just way too slow. Brute forcing the average 400,000 billion possibilities of an average 8 characters passwords would take months, if not years. Taking Winzip as an example is just using the one software that's using one of the poorest protections ever .

I still sorta disagree about this tool...it makes me uneasy

quote:

---

Originally posted by riahc4
I still sorta disagree about this tool...it makes me uneasy

---

it's not your pick, and patchou is pretty much right about what he says

Ok, the problem I am currently facing is decrypting the password.

I wrote a Java code but it isnt working correctly at all.. Maybe I can provide someone with the encrypted,scrambelled password and you decrypt it for me?

Thanks

quote:

---

Originally posted by brainy
Ok, the problem I am currently facing is decrypting the password.

I wrote a Java code but it isnt working correctly at all.. Maybe I can provide someone with the encrypted,scrambelled password and you decrypt it for me?

Thanks

---

The password is a hash, so you have no way of decryting it. And if you could decrypt it that would make the log encryption a bit pointless wouldn't it

Ah.. I thought from the first post, that pseudo code was to decrypt the password

This hash is in what crypt format? DES, AES? or it is just one that made Patchou, because i want to do a program too, but i want it to compare the hash that the user enter with the one that has the encrypted log, if its not the same, the program will close it self, but i cannot see to figure out if the hash is a normal hash, or if it hash been encrypted with somethod.

did i explain well my self?

there is no reason to compare the hash of anything, the new Messenger Plus! Live comes with 2 "Log Viewer.exe" program that accepts command line parameters to encrypt/decrypt/change password.

I used you software to decrypt a file (*.ple). I havent the password of course. In the "input file", I put the .ple file. In the output file I put a .txt file, but the software ask me the password. But I havent it ! and i want to decrypt the .ple file. How can I do ?? thanks

quote:

---

Originally posted by marie-canard
I used you software to decrypt a file (*.ple). I havent the password of course. In the "input file", I put the .ple file. In the output file I put a .txt file, but the software ask me the password. But I havent it ! and i want to decrypt the .ple file. How can I do ?? thanks

---

you can't....

The algorithm showed in the first post is the same as what Plus!3 does to decrypt an encrypted log file. In other words you can make a logviewer out of it. But it also means you need the password as the password is the key for the decryption.

This software, tool, or even Plus! itself are not password crackers nor decryption crackers.