0

Say you have a cryptographically random 8 character long alphanumeric password (A-Z, a-z, 0-9) used to encrypt a ZIP file with AES-128.

Can this program:

http://www.openwall.com/passwords/zip-winzip-archives

Really crack it in a feasible amount of time?

2
  • Please don't doublepost :/ Jul 2, 2012 at 23:28
  • Sorry. I guess this is kinda close to my other question. I was specifically wondering if there was anything "special" about this program. But as was answered, brute force is still brute force.
    – John
    Jul 3, 2012 at 0:31

1 Answer 1

2

If you have a random generated password, without a meaning (no words), then there is no way to do a successful dictionary attack.

Now with your character sets, you have 2,18340106 × 10^14, thats loads. It would take a very long time to crack based on bruteforce.

Now this tool simply tries to attack the algorithm by using a dictionary attack. It hopes that the password is a common word or a deriative (some dictionaries will contain b00k too).

1
  • Ok, good. I got a little worried there that maybe something about ZIP files made them weaker or something or that an alphanumeric 8 character password wasn't good enough. Thanks for clearing that up.
    – John
    Jul 3, 2012 at 0:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .