decryption without a password key

[Amy]

Is there a possible way to decrypt files without a password key??? I
formatted my PC and forgot to save the key...I know that you dont believe me
but its the truth, I swear.

 

[Patrick Keenan]

Is there a possible way to decrypt files without a password key??? I
formatted my PC and forgot to save the key...I know that you dont believe
me
but its the truth, I swear.

So you're trying to decrypt the encrypted backup? You used EFS?

EFS relies on the account credentials. The "password key" isn't enough.
If you invoke EFS, you must export the account credentials and store them
securely. Unfortunately, this step is not mandatory.

There are some alternate methods involving a designated recovery agent.
However, it's unlikely that this was done, and it's much too late now.

For the most part, if you don't have the certificates, and can't get them,
the data is not retrievable.

Sorry, there are very seldom happy endings to this question.

HTH
-pk

 

[Amy]

So you're trying to decrypt the encrypted backup? You used EFS?

EFS relies on the account credentials. The "password key" isn't enough.
If you invoke EFS, you must export the account credentials and store them
securely. Unfortunately, this step is not mandatory.

There are some alternate methods involving a designated recovery agent.
However, it's unlikely that this was done, and it's much too late now.

For the most part, if you don't have the certificates, and can't get them,
the data is not retrievable.

Sorry, there are very seldom happy endings to this question.

HTH
-pk


EFS? Whats that? I know that someone knows how to decrypt without a key, even you maybe, but people dont wanna talk about that because they dont wanna get fired or something but there is a way I know...4 sure there is...

 

[GreenieLeBrun]

Some light reading for you, if you didn't save you encrytion key you are
probably up that well known creek without a paddle.

One piece of software MAY be able to help you, look at
Advanced EFS Data recovery
http://www.crackpassword.com/products/prs/mswin/efs/
I have never used it so I can't give an opion on it.

The Encrypting File System
http://www.microsoft.com/technet/security/topics/cryptographyetc/efs.mspx

Best practices for the Encrypting File System
http://support.microsoft.com/kb/223316/en-us

How to back up the recovery agent Encrypting File System (EFS) private key
in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/kb/241201

How To Encrypt a Folder in Windows XP
http://support.microsoft.com/?id=308989

How To Remove File Encryption in Windows XP
http://support.microsoft.com/?id=308993

How To Encrypt a File in Windows XP
http://support.microsoft.com/?id=307877

 

[Patrick Keenan]

EFS is the XP Encrypting File System. If you used the built-in XP
encryption, this is what you used.

Alternately, you encrypted with a 3rd party product, or, you did not
encrypt the data, but merely marked it private.

And if you just marked it private, google "Take Ownership XP" and this will
tell you how to regain access rights.

Marking private, however, is *not* encrypting data; it's a totally different
thing.

I know

I'm not actually sure that is correct. You may hope that this is the case,
but your hope is not actual knowledge.

that someone knows how to decrypt without a key,

If you did use XP EFS encryption but do not have the certificates and did
not designate a recovery agent, you could maybe ask for time on NSA systems.

That's about the start of where recovery becomes a possibility. And this
will probably not be characterised as inexpensive or practical.

even you maybe,

Yes, that's why I am telling you the methods - and where they end.

but people dont wanna talk about that because they
dont wanna get fired or something but there is a way I know

Yes, there is. And that way is to import the certificates that you backed
up when invoking encryption the first time. Or, by connecting to the
recovery agent system.

Otherwise, the short answer is no. The data is gone.

Virtually every time a question like yours is posted, the data is
permanently irretrievable, because the user did not complete the tasks
needed to provide a way to decrypt the data.

...4 sure there is...

Sorry, but XP encryption is very strong, and if you used it but did not back
up the certificates or designate a recovery agent, consider the data
permanently gone, and move on.

MS did a great job at making strong encryption easily available. They
didn't do such a great job at making clear the consequences or
responsibilities that go with it.

You should do the reading on the EFS system, if it is in fact what you used.
It is excellent protection, but it carries risks and imposes
responsibilities on the users who choose to invoke it.

But again, you may simply be mistaking ownership and permissions for
encryption.

HTH
-pk

 

[Patrick Keenan]

Some light reading for you, if you didn't save you encrytion key you are
probably up that well known creek without a paddle.

One piece of software MAY be able to help you, look at
Advanced EFS Data recovery
http://www.crackpassword.com/products/prs/mswin/efs/
I have never used it so I can't give an opion on it.

It sounds promising, but if the drive was formatted, this (at least formerly
necessary) condition may not apply:

http://groups.google.ca/group/micro...q=Advanced+EFS+Data+Recovery#9bbc23b1239004f7
From "Advanced EFS Data Recovery v1.30" readme.txt:


<quote>
Known problems and limitations


- The program can decrypt protected files only if encryption keys
(at least, some of them) are still exist in the system and have
not been tampered.

HTH
-pk