RE: Decrypting .dat files

Hi,

The data file formats are documented in the files notes.txt and formatV2.txt
that are part of the source distribution.

	Rony

> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On 
> Behalf Of Dickerson, Cliff
> Sent: Thursday, November 11, 2004 7:28 PM
> To: '[email protected]'
> Cc: [email protected]
> Subject: RE: [Passwordsafe-users] Decrypting .dat files
> 
> 
> Rony,
> 
> Thanks for the information!
> 
> Is there somewhere I can find the differences between 1.9 and 
> 2.0 dat file formats?
> 
> -cliff
> 
> -----Original Message-----
> From: Rony Shapiro [mailto:[email protected]]
> Sent: Thursday, November 11, 2004 5:20 AM
> To: 'Schreck, Juergen'; 'Dickerson, Cliff'
> Cc: [email protected]
> Subject: RE: [Passwordsafe-users] Decrypting .dat files
> 
> 
> Hi,
> 
> Indeed PasswordSafe does not support the command-line decryption of an
> entire password database. Two points, though:
> 
> 1. The source distribution contains a Perl script 
> (pwsafe-decode.pl) that
> can parse and decrypt 1.9 databases - it should be 
> straightforward to modify
> to support the 2.0 file format. If anyone does so, I'd be 
> glad to publish
> it.
> 
> 2. PasswordSafe can be used via command line to encrypt and decrypt
> arbitrary files (NOT password databases). "Pwsafe -e foo.txt" 
> will prompt
> for a password, and use it to encrypt foo.txt into 
> foo.txt.PSF. "Pwsafe -d
> foo.txt.PSF" will prompt for the password, and, if correct, 
> decrypt the
> file. This is an undocumented vestige of the original version.
> 
> Hope this helps,
> 
> 		Rony
> 
> > -----Original Message-----
> > From: [email protected] 
> > [mailto:[email protected]] On 
> > Behalf Of Schreck, Juergen
> > Sent: Thursday, November 11, 2004 11:13 AM
> > To: 'Dickerson, Cliff'; '[email protected]'
> > Subject: RE: [Passwordsafe-users] Decrypting .dat files
> > 
> > 
> > I will hope, that this will never work. I think this would 
> be against all
> > purposes of pwsafe. If it would be so easy to decrypt the 
> database you
> could
> > hold your passwords in a plain textfile, too.
> > 
> > Regards,
> > 
> > Jürgen Schreck
> > ---------------------------------------------
> > Siemens AG; COM ESY SEC DI4
> > Otto-Hahn-Ring 6; 81730 München
> > FON: +49 89/636-42636	FAX: +49 89/636-45860
> > 
> > -----Original Message-----
> > From: Dickerson, Cliff [mailto:[email protected]] 
> > Sent: Wednesday, November 10, 2004 11:24 PM
> > To: '[email protected]'
> > Subject: [Passwordsafe-users] Decrypting .dat files
> > 
> > 
> > Hi,
> > 
> > I have version 2.06, does anyone know if/how to decrypt the 
> > .dat file from
> > the command line with a tool like OpenSSL?
> > 
> > I've tried a with and without a salt.
> > 
> > with salt I get "bad magic number"
> > 
> > without salt I get "bad decrypt"
> > 
> > Any ideas?
> > 
> > Thanks much.
> > 



-------------------------------------------------------
This SF.Net email is sponsored by:
Sybase ASE Linux Express Edition - download now for FREE
LinuxWorld Reader's Choice Award Winner for best database on Linux.
http://ads.osdn.com/?ad_idU88&alloc_id065&op=click