Comments (9)
Opening an issue is in fact the best way to contact me about one of my programs, so no worries there.
As to your question, the Outlook pst file specification describes how the password is held as a hash (MD5, from memory) as a property of the file. Its enforcement is described as being "the responsibility of the UI". I could have detected the presence of a password, demanded that one be supplied, hashed the entered string and compared it with the stored value. But being open source, this would have provided the merest figleaf of protection to anybody that knew what they were doing, given that the contents are never in any way encrypted, rather to my surprise. So I ignore any password that might be present.
Dijji
from xstreader.
Thanks for clarifying and I agree with your rationale.
I am feeling slightly embarrassed as, for years, I had assumed the files were encrypted, but have discovered that they aren't - a bit like discovering you are only wearing a figleaf... I am now trying to work out the best method of protecting them - probably as an encrypted zip file to start with.
from xstreader.
I felt the same when I found out the awful truth. All those years I had been carefully setting passwords on pst files... File under 'things mother Microsoft never told you'.
Office does have support for sending and receiving encrypted emails as part of Office 365. However, I'm pretty sure this does not extend to pst files, because otherwise they would be legally obliged to document the file format, and it certainly is not there at the moment. They can do what they want in ost files, with no need to publish, so that's where they innovate (the 64-bit format being an example).
The only way I know of to really protect pst files is as you suggest, to encrypt the whole thing using zip. Most implementations will give you pretty good encryption algorithms.
Dijji
from xstreader.
Does XstReader have any function that detects if the password is present in any of the PST properties?
from xstreader.
No. The location of the hashed password is well-known (there is only one per PST file), and XstReader could retrieve it, but currently does not.
from xstreader.
Can I add such functionality to identify the correct password and get it from PST/OST? If so, any ideas?
from xstreader.
As described in the documentation, the CRC-32 hash of the password text is stored in the PidTagPstPassword property in the PC associated with NID_MESSAGE_STORE, so it is just a question of adding this property to the list of properties read at the store level.
However, since what is stored is a hash, the only API you can reasonably add would verify a clear text password, or perhaps better, a hash of a password.
What scenario do you have in mind that would make the addition of password support useful?
from xstreader.
"Having a password bank is very useful because it can be used to open other documents." It would be very useful if "xstReader" includes the function of detecting and recovering the password or adding it automatically within the list of properties in a future release.
Anyway this app is very useful
from xstreader.
There is no way to retrieve the password itself, as only its hash is stored. So I'm not currently seeing in useful way to proceed with this.
from xstreader.
Related Issues (20)
- Support for exporting to EML w/attachments HOT 5
- Commandline parsing to CSV? HOT 2
- Feature Request: Open/Search Multiple Files HOT 2
- "Sub-nodes of sub-nodes not yet implemented" crash in pst file with embedded message attachment HOT 7
- Few queries HOT 4
- HTML Export to the same folder structure HOT 2
- Duplicate Dictionary Key Exception During Processing of Certain Messages with Multiple Attachments HOT 3
- Feature Request: Open a MSG File and extract their properties HOT 1
- VirusTotal HOT 3
- Extract permanently deleted items HOT 2
- OST/PST encryption/compression HOT 1
- XstExport command usage HOT 1
- Feature Request: Bulk import HOT 1
- Sad news about Dijji HOT 6
- Timestamp in UTC HOT 2
- New Release in the iluvadev fork
- Feature request - viewing accents HOT 1
- there is no xstreader.exe to open
- OST to PST
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from xstreader.