Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Ok, long story short, I'm currious how long it would take an agency to crack a 10-15 character winrar password. The file names in the archive are also scrambled including a word at the start and numbers and characters. Roughly, should I have reason to believe this could be cracked within a reasonable time frame?

share|improve this question
    
It will probably take less time if they see this now that you posted this.... –  Rell3oT Apr 29 '13 at 1:52
    
oh its not actually happening, im just curious :) –  Jake Apr 29 '13 at 1:52
    
Should probably find a better way to store supersensitivefiles that you're worried the FBI might find. And posting here is pretty helpful for them to find an answer if it's really something serious. –  ekaj Apr 29 '13 at 2:18
add comment

closed as not constructive by Terry Chia, Adnan, AJ Henderson, Iszi, Scott Pack Apr 30 '13 at 17:44

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

3 Answers

The answer is 42 of course.

In all seriousness, this question is unanswerable. There are many factors, including but not limited to the amount of hardware the attacker is willing to throw at you.

Your password is weak though, it's very predictable which is the bane of strong passwords.

share|improve this answer
add comment

There is some data here. WinRAR uses a custom key derivation function which involves thousands of SHA-1 invocations. Apparently, with two good GPU, about 15000 passwords per second can be tried.

Then it depends, not on the length of your password, but on the way you produced it. It's not the length which makes the password strong, but the randomness. If your password is a sequence of 15 random characters, chosen uniformly and independently of each other, then it will resist forever. If it is a common English word which happens to be 15 characters long, then it is toast and will be recovered in a matter of seconds.

share|improve this answer
add comment

As mentioned rar uses SHA-1 which is pretty strong. You can have a good comparison of different algorithms here. As you can see cracking rar is slower than WPA-PSK.

share|improve this answer
    
please give details and not just the link.. –  Shurmajee Apr 30 '13 at 7:37
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.