hashcat Forum
Support for MSOFFCRYPTO? - Printable Version

+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Ancient Versions (https://hashcat.net/forum/forum-46.html)
+--- Forum: Feature Requests (https://hashcat.net/forum/forum-7.html)
+--- Thread: Support for MSOFFCRYPTO? (/thread-282.html)



Support for MSOFFCRYPTO? - -=bb=- - 02-08-2011

Hi,

I was wondering if there were any plans to introduce support for EMCA 376 Standard MS OFFCRYPTO as used in Open Office and Office 2007/2010?

Locating the hash values that you would need to submit to the application can be done fairly easily manually with a hex editor.

However 2007 requires 50000 rounds of SHA1 (100k for 2010)

PHP Code:
for (int i 050000i++)
{
    
// Generate each hash in turn
    // H(n) = H(i, H(n-1))
    
hashBuf SHA1Hash(ihashBuf);

Source : http://ooxmlcrypto.googlecode.com/svn-history/r3/trunk/OfficeCrypto/OfficeCrypto.cs

And it also uses AES128 (by default, you can also use 192 and 256).

There are many, commercial, programs for Windows that do this, and they do seem to offer huge performance increases when using GPU acceleration and I was wondering if this was functionality that we would see implemented?

Many thanks

bb

Other sources :

C# code to extract and test a password : http://offcrypto.codeplex.com/releases/view/20832
Very good walkthrough of the algorithm : http://www.lyquidity.com/devblog/?p=35



RE: Support for MSOFFCRYPTO? - atom - 02-09-2011

no plans on this yet


RE: Support for MSOFFCRYPTO? - -=bb=- - 02-09-2011

(02-09-2011, 10:24 AM)atom Wrote: no plans on this yet

Thanks for letting me know Smile