So as you may have heard, the Adobe user database with 130 million records was leaked recently. I want to find out what password I used for the Adobe account I created to make sure that I'm not using it anywhere else. But how do I decrypt the Triple DES ECB-mode encrypted password? Is there a way to do this without knowing the Adobe Cipher Key? Is there a way to get the Cipher Key?
migrated from crypto.stackexchange.com Nov 13 '13 at 14:22
This question came from our site for software developers, mathematicians and others interested in cryptography.
The encryption key was never published and triple DES itself is strong enough to not brute force, so you have to use some of the other mistakes to attempt to recover your password.
Your options are: exploit the fact that they used ECB and use the hints.
To do this you will find your encrypted password and see if other users had the same block. For example, say your encrypted password blocks were (shortened for simplicity):
|show 1 more comment|
A very good explanation can be found at this url: http://nakedsecurity.sophos.com/2013/11/04/anatomy-of-a-password-disaster-adobes-giant-sized-cryptographic-blunder/
The idea is exactly what mikeazo said in an other answer.