Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Say you have a cryptographically random 8 character long alphanumeric password (A-Z, a-z, 0-9) used to encrypt a ZIP file with AES-128.

Can this program:

Really crack it in a feasible amount of time?

share|improve this question
Please don't doublepost :/ – Tie-fighter Jul 2 '12 at 23:28
Sorry. I guess this is kinda close to my other question. I was specifically wondering if there was anything "special" about this program. But as was answered, brute force is still brute force. – John Jul 3 '12 at 0:31
up vote 2 down vote accepted

If you have a random generated password, without a meaning (no words), then there is no way to do a successful dictionary attack.

Now with your character sets, you have 2,18340106 × 10^14, thats loads. It would take a very long time to crack based on bruteforce.

Now this tool simply tries to attack the algorithm by using a dictionary attack. It hopes that the password is a common word or a deriative (some dictionaries will contain b00k too).

share|improve this answer
Ok, good. I got a little worried there that maybe something about ZIP files made them weaker or something or that an alphanumeric 8 character password wasn't good enough. Thanks for clearing that up. – John Jul 3 '12 at 0:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.