How long would it take to brute force decrypt an AES 128 encrypted zip file if the password is 8 characters long in the range of A-Z, a-z, 1-9?
Does it make any difference if .NET's
System.Random object was used to generate the password or if
System.Security.Cryptography.RNGCryptoServiceProvider was used?
I'm writing an application and I want to make sure I get the security right. In the worst-case scenario, if an attacker got access to the client's computer, he would have a few dozen zip files to attack but they all have the same password. I want to ensure that the application is secure against this kind of offline brute force attack. The attacker would not have access to any other randomly generated passwords or zip files encrypted with a different randomly generated password.