Skip to main content
fitful
New Member
April 28, 2015
Question

decrypt file configuration

  • April 28, 2015
  • 4 replies
  • 25263 views

Hello, I have encrypted backup configuration and I know the password. I would like to decode only the configuration file to check some settings - is it possible without uploading the configuration on the device? From what I have found that the file is encrypted with AES128

    4 replies

    emnoc
    New Member
    April 28, 2015

    I would like to know how you found that out? I too was running into the same issue. I believe the encryption key is some hash of the encrypted password that you present during the backup.

     

    Keep us posted on what you find, TAC told me there was no way to extract.

    GusTech
    New Member
    April 28, 2015

    fitful wrote:

    From what I have found that the file is encrypted with AES128

    Are you absolutely sure?

    AndreaSoliva
    New Member
    April 29, 2015

    Hi

     

    confirm now way to encrypt locally out of the scratch. Keep in mind that if that would be possible your backup which is encrypted is nonsens if somebody would get you backup file. This is the reason YOU CAN'T ENCRYPT. Of course probably there is a way but of course not comunicated by TAC and of course not a standard way.

     

    At least I have to say "it works as designed" :)

     

    hope this helps

     

    have fun

     

    Andrea

    GusTech
    New Member
    April 29, 2015

    AndreaSoliva wrote:

    Keep in mind that if that would be possible your backup which is encrypted is nonsens if somebody would get you backup file. This is the reason YOU CAN ENCRYPT. 

    It's ok.. However, when we know the password to our own files.. It would be really nice with some more info on what is used.

    emnoc
    New Member
    April 29, 2015

    FWIW

     

    This is why pgp/openssl comes in handy. You can always execute backup and then encrypted the cfg file for additional security using your own define encryption method. This also allow for you to exch the file with other security associates  with out concern for risk and modifications.

     

    This also allows you to remove the encryption to review a backup file B4 restoral of if you need to diff various backup from current cfg to previous past.

     

    Using the unknown encryption method vrs a known method and with your own key/passphrase.... the latter is more acceptable imho.

     

    just my 2cts