john-users - ASP.NET ViewState encryption crack

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 12 Sep 2012 11:39:07 +0400
From: Vladimir Vorontsov <vladimir.vorontsov@...ec.ru>
To: john-users@...ts.openwall.com
Subject: ASP.NET ViewState encryption crack

Hi all!

Please help assess the feasibility and the recovery speed key for
encryption in .NET's ViewState

Details about encryption:
http://msdn.microsoft.com/en-us/magazine/ff797918.aspx

"The maximum length supported for AES keys is 24 bytes (48 hex chars) in
the Microsoft .NET Framework 3.5 and earlier, and 32 bytes (64 hex
chars) in the .NET Framework 4. DES supports a maximum key length of
only 8 bytes and 3DES a maximum of 24 bytes, regardless of the framework
version"

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]