find a passpharse
Mr.Bad
mr.bad@pigdog.org
19 Oct 2000 09:20:34 -0700
>>>>> "LF" == Levente Farkas <lfarkas@mindmaker.hu> writes:
LF> hi, I encrypt 8 of my txt files in august, and in order not to
LF> make any typo (!!!) I cu&paste the passphrase. now when I try
LF> to decrypt them the passphrase is not working (bad key).
OK, well, I wanted to bring up one of GnuPG's "special features,"
anyways: there's a backdoor built in so that if you can't find the
passphrase for your key, you can always just type in the word
"password" and that will work, too. Typing in your user ID (name and
email address) will also unlock the key.
Haha! Just kidding! Did I scare anybody? B-)
Levente: It's actually really, really, really hard to recover a
passphrase. (Note that when people talking about encryption say
"really hard," they mean "lifetime-of-the-universe hard.") This is
part of the security that GnuPG gives: someone who got access to your
computer couldn't just go into the encrypted files on there
willy-nilly. They'd have to know your passphrase, and the passphrase
is stored in a super-secure way.
Normally, you're ass-out in this case. Of course, that doesn't help
for me to remind you of that, so here's what I'd recommend:
* Really, really try to remember the passphrase. Wait a while,
take a couple of days, let it come to you by
serendipity. These things usually come to me when I'm taking
a shower or just falling asleep, so I recommend you take a
lot of naps and showers. B-)
* Try and recover the data another way -- see if you forgot to
delete the source files somewhere, or if you can retrieve
them from someone else who has 'em, or whatever.
* If you can't recover your data any other way, you -could-
try running a password cracker on GnuPG. I don't know of any
crackers that do that right now, but you might want to type
"password crack" into the Google prompt and see what you can
find. A lot of password crackers are customizeable so that
you can tell them what program to run and how to pass the
password in.
Note that if you used an even half-decent passphrase (like,
not your name or "password" or what have you) it's entirely
possible that the password cracker won't work.
I wish there was another way to help you, but at the same time I'm
glad there's not another way to help you. B-) Next time, use a
passphrase you'll remember!
~Mr. Bad
--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
/\____/\ Mr. Bad <mr.bad@pigdog.org>
\ / Pigdog Journal | http://pigdog.org/ | *Stay*Real*Bad*
| (X \x)
( ((**) "If it's not bad, don't do it.
\ <vvv> If it's not crazy, don't say it."
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--
Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
with a subject of "unsubscribe" to gnupg-users-request@gnupg.org