AMI Pro password protection is breakable. 
Author Message
 AMI Pro password protection is breakable.

A few weeks ago I analyzed the encryption algorithm in Lotus'
Ami Pro program for a client who had lost the passwords to
some files.  This particular program uses a cipher that's
a bit better than many proprietary ciphers I've encountered
(it's far better than the toy ciphers in programs like Microsoft
Word), but it is breakable.

With my attack, most passwords can be found quickly (a few
minutes), though a few are more difficult but still breakable.
My attack does not require any known plaintext as there is
enough information in the file header for the attack.)

I do not currently have plans to make technical details or code
to exploit the weakness public, but want to warn any people or
consultants whose companies who might be using Ami Pro that
there is a problem.

Cheers,
Paul Kocher

___________________________________________________________________________
DISCLAIMER: The views presented in this message do not represent Microsoft,
RSA Labs, or any other corporation I am affiliated with and/or work for.
___________________________________________________________________________
Paul C. Kocher                         Independent data security consultant



Thu, 04 Sep 1997 11:10:39 GMT
 
 [ 1 post ] 

 Relevant Pages 

1. Need to crack a Absolute Security pro 3.9 password protected picture

2. GPU powered password cracker cracks passwords in minutes

3. Google.Earth.Pro.v4.1.7087

4. Windows XP Pro KeyGen 8452 [1/2]

5. Google.Earth.Pro.v4.1.7087

6. us.sport.basketball.pro

7. MSDN VS 2008 Pro - cab file corupted - setup error

8. Web Developement template missing in visio pro 07..!!!!

9. Compiling VS projects in VS pro (project created with VS Team Dev),

10. Amateur Beats Pro in NorCal Tournament But Third Party Takes First Place in Four-way Tie

11. Windows xp pro serial

12. Guitar pro 5 serial


 
Powered by phpBB® Forum Software