• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

PDF Security

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Cryptographic Software and Hardware

View previous topic :: View next topic  
Author Message
ptolemytoo
Just Arrived
Just Arrived


Joined: 11 Apr 2009
Posts: 0


Offline

PostPosted: Sat Apr 11, 2009 9:29 pm    Post subject: PDF Security Reply with quote

Hello all

I have just joined.

Could someone give me some clue as to just how secure a PDF document with a user password is. It would be created with Adobe Acrobat 6.0 Pro using 128-bit RC4. I have not been able to get a definitive answer after extensive Googling.

I know there are software packages that can bypass the Master Password--the one used to restrict printing and modifying of the document etc. I am not concerned with that, I want to know if sending a PDF document, that needs a password to open, via email is reasonably safe. This site, claims that they will crack a user password document for $500: http://www.pwcrack.com/acrobat.shtml. I suspect they are talking about the 40-bit key only but I'm not sure.

Assuming the NSA is not interested in cracking this file, how easy would it be for a motivated amateur, with free software to do so?

TIA

Harry
Back to top
View user's profile Send private message
ptolemytoo
Just Arrived
Just Arrived


Joined: 11 Apr 2009
Posts: 0


Offline

PostPosted: Thu Apr 16, 2009 12:44 am    Post subject: PDF Security - Nobody? Reply with quote

Does nobody have even an opinion?

Am I doing something wrong?

Harry
Back to top
View user's profile Send private message
Fire Ant
Trusted SF Member
Trusted SF Member


Joined: 27 Jun 2008
Posts: 3
Location: London

Offline

PostPosted: Thu Apr 16, 2009 10:12 am    Post subject: Reply with quote

Harry,

I think the NSA just need to put one Dell PC on the case and voila. Have a look at this Wiki article which gives a good run down on the cipher.

http://en.wikipedia.org/wiki/Rc4

RC4 (104-bit) was used in WEP which we all know can be cracked by my nan using a calculator. Is RC4 considered a weak algorithm, I would say yes but the whole WEP cracking thing is different to PDF security. RC4s weakness is its ability to leak key material into the ciphertext and over time the key can be determined.

Is it strong enough for PDF security, difficult to say but I would gestimate yes. What makes the any symmetric encryption scheme weak is that a passphrase is normally used to protect the key material or becomes the key material. In this case I can set my brute force cracker on your PDF knowing that your passphrase is something easy to remember not like real key material which would be random as a machine could make it.

Matt_s
Back to top
View user's profile Send private message
ptolemytoo
Just Arrived
Just Arrived


Joined: 11 Apr 2009
Posts: 0


Offline

PostPosted: Thu Apr 16, 2009 9:37 pm    Post subject: Reply with quote

Thank you very much for your well reasoned response,

I'm going to assume that, in the absence of a targeted and motivated attack--which there is no reason to expect--and with a good, random password containing numerals and other non alphabetic characters, that the document will be safe enough.

I believe later versions of Acrobat use AES encryption which I assume will be more secure. It remains for me and the recipient to upgrade to Acrobat Ver. 9.0.

Regards

Harry
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Cryptographic Software and Hardware All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register