(12-27-2024, 04:05 PM)DanielG Wrote: Hashcat supports 3 types of GPG:
17010 GPG (AES-128/AES-256 (SHA-1($pass)))
17020 GPG (AES-128/AES-256 (SHA-512($pass)))
17030 GPG (AES-128/AES-256 (SHA-256($pass)))
Yours does not seem to be one of them because your hash starts with $gpg$*0* which does not match any of these 3.
with gpg2john you can add a debug flag (-d) and it wil print out information about the file such as the algorithm used. That way you can check which mode your Gpg4win used to create your file.
This is what I have got:
Code:
gpg2john.exe -d C
:\Users\xxx\Desktop\file.txt.gpg.txt
File C:\Users\xxx\Desktop\file.txt.gpg.txt
Old: Symmetric-Key Encrypted Session Key Packet(tag 3)(13 bytes) partial start
Packet type 3, len 13 at offset 2 (Processing) (pkt-type Symmetric_Key_Encrypted_Session_Key_Packet) (Partial no)
Sym alg - AES with 256-bit key(sym 9)
Iterated and salted string-to-key(s2k 3):
Salt - 1a5c6a8e16d90b5b
Count - 62914560(coded count 254)
New: Symmetrically Encrypted and MDC Packet(tag 18)(80 bytes) partial start
Packet type 18, len 80 at offset 17 (Processing) (pkt-type Symmetrically_Encrypted_and_MDC_Packet) (Partial no)
Ver 1
Encrypted data [sym alg is specified in sym-key encrypted session key]
unexpected end of file.
Any idea what I can do with that?