RE: Decrypting .dat files

Rony,

Thanks for the information!

Is there somewhere I can find the differences between 1.9 and 2.0 dat file formats?

-cliff

-----Original Message-----
From: Rony Shapiro [mailto:[email protected]]
Sent: Thursday, November 11, 2004 5:20 AM
To: 'Schreck, Juergen'; 'Dickerson, Cliff'
Cc: [email protected]
Subject: RE: [Passwordsafe-users] Decrypting .dat files


Hi,

Indeed PasswordSafe does not support the command-line decryption of an
entire password database. Two points, though:

1. The source distribution contains a Perl script (pwsafe-decode.pl) that
can parse and decrypt 1.9 databases - it should be straightforward to modify
to support the 2.0 file format. If anyone does so, I'd be glad to publish
it.

2. PasswordSafe can be used via command line to encrypt and decrypt
arbitrary files (NOT password databases). "Pwsafe -e foo.txt" will prompt
for a password, and use it to encrypt foo.txt into foo.txt.PSF. "Pwsafe -d
foo.txt.PSF" will prompt for the password, and, if correct, decrypt the
file. This is an undocumented vestige of the original version.

Hope this helps,

		Rony

> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On 
> Behalf Of Schreck, Juergen
> Sent: Thursday, November 11, 2004 11:13 AM
> To: 'Dickerson, Cliff'; '[email protected]'
> Subject: RE: [Passwordsafe-users] Decrypting .dat files
> 
> 
> I will hope, that this will never work. I think this would be against all
> purposes of pwsafe. If it would be so easy to decrypt the database you
could
> hold your passwords in a plain textfile, too.
> 
> Regards,
> 
> Jürgen Schreck
> ---------------------------------------------
> Siemens AG; COM ESY SEC DI4
> Otto-Hahn-Ring 6; 81730 München
> FON: +49 89/636-42636	FAX: +49 89/636-45860
> 
> -----Original Message-----
> From: Dickerson, Cliff [mailto:[email protected]] 
> Sent: Wednesday, November 10, 2004 11:24 PM
> To: '[email protected]'
> Subject: [Passwordsafe-users] Decrypting .dat files
> 
> 
> Hi,
> 
> I have version 2.06, does anyone know if/how to decrypt the 
> .dat file from
> the command line with a tool like OpenSSL?
> 
> I've tried a with and without a salt.
> 
> with salt I get "bad magic number"
> 
> without salt I get "bad decrypt"
> 
> Any ideas?
> 
> Thanks much.
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Sybase ASE Linux Express Edition - download now for FREE 
> LinuxWorld Reader's
> Choice Award Winner for best database on Linux.
> http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
> _______________________________________________
> Passwordsafe-users mailing list 
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/passwordsafe-users
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Sybase ASE Linux Express Edition - download now for FREE
> LinuxWorld Reader's Choice Award Winner for best database on Linux.
> http://ads.osdn.com/?ad_idU88&alloc_id065&op=ick
> _______________________________________________
> Passwordsafe-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/passwordsafe-users
> 


-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_idU88&alloc_id065&op=click