Live data from Hacker News

Found a 16y old password protected Zip file with my mIRC logs

news.ycombinator.com

11–13 of 13 posts

Re: Found a 16y old password protected Zip file with my mIRC logs

#11
post #2

I would research as to what cipher was used in zip files back then and see if it is currently defeatable, like RC4 or AES with bad padding, and then work through the cryptopals.com problems and see if any of this applies to the zip file.

I'm not a cryptography guy myself but thanks for the tip - still on time to learn a few things!

Re: Found a 16y old password protected Zip file with my mIRC logs

#12
post #10
post #3

You have either brute force with more characters or if you have a file in there with a known content there is a known-plaintext attack on zip encryption. I've used it once and it worked nicely but it's rather tricky to find another file with the exact same content for this.

wow! this is a good one! The Zip contains not only the logs but all the files that were part of the mIRC application (executable, config, etc). Maybe I'll try to find some old config files and explore this option.

The utility I used is PkCrack: https://www.unix-ag.uni-kl.de/~conrad/krypto/pkcrack.html

Re: Found a 16y old password protected Zip file with my mIRC logs

#13
If it's from 2000 and they were created using WinZip up to v8.0, you can use the Passware Kit and the SureZip recovery as per http://www.lostpassword.com/attacks.htm#surezip

> SureZip attack decrypts Zip archives created with WinZip version 8.0 and earlier in less than an hour regardless of password used to protect it. At least 5 simultaneously encrypted files are required in order to process the archive. Archives created with WinZip are supported.

I used this when it first came out and even with a 60-char password, if there were more than 5 files it could extract them within an hour (sometimes less than 5 minutes).

Post reply on HN