Is decryption possile via TM1crypt

[vipin]

Hi All,
I thank you all for valuable suggestions and idea on my first post. I was searching on Google about what encryption methodology does tm1cript.exe follows also is decryption also possible via tm1crypt.exe the way we do encryption in it ?..

Please post in the right forum, TYVM

[qml]

I was searching on Google about what encryption methodology does tm1cript.exe follows also is decryption also possible via tm1crypt.exe the way we do encryption in it ?..

It utilises the 256-bit Advanced Encryption Standard, Cipher Block Chaining. I am not aware of this particular tool allowing you to decrypt an encrypted file, but if you have the keyfile.dat file then it should be very easy to use another AES-256-CBC tool to decrypt the password for the private key, because the encryption/decryption key is simply stored in keyfile.dat. There are easily googlable free online tools that can do the decryption for you.

[vipin]

Hi,
Thanks again for this.. actually my requirement says that decryption should not take place the same way as encryption occurs via tm1cript.exe. if this tm1crypt.exe is just good enough to encrypt the password and do not allow to decrypt via same utility then , it is good for my process. the purpose is that once the password file is encrypted along with the key file , any one else must not be able to decrypt the same password file using same utility.ie. tm1cript.exe. ..

[qml]

actually my requirement says that decryption should not take place the same way as encryption occurs via tm1cript.exe. if this tm1crypt.exe is just good enough to encrypt the password and do not allow to decrypt via same utility then , it is good for my process. the purpose is that once the password file is encrypted along with the key file , any one else must not be able to decrypt the same password file using same utility.ie. tm1cript.exe. ..

The utility itself is of course irrelevant. All the information required to decrypt the password file is contained in the encrypted password file (default name: tm1cipher.dat) and the keyfile (default name: tm1key.dat). Once someone gets hold of these, they can decrypt the contents using one of thousands of AES-256 utilities available. So the real security depends on how well you can protect these.

[vipin]

No need to be sorry sir, that's absolutely fine. You know my observation while running -validate parameter says that the utility will decrypt the encrypted password and display the results as clear text.
The displayed text should correspond to the password I specified with the -pwd parameter at the time when I was encrypting the file.

-validate "This parameter does not allow validation of exiting files" as per TM1 site so in a scenario where I already have an encrypted password. no one will be able to convert it into plain text or should be able to fetch my password from TM1cipher.dat file where password is encrypted. I think so , but not sure ..

[qml]

-validate "This parameter does not allow validation of exiting files" as per TM1 site so in a scenario where I already have an encrypted password. no one will be able to convert it into plain text or should be able to fetch my password from TM1cipher.dat file where password is encrypted.

Correct, I realised this seconds after I wrote my previous post and edited it right away, before you managed to post your reply. It looks like tm1crypt.exe does not offer decryption, but - if my understanding is right - that is still a trivial thing to do for anyone that has both output files, because the encryption method is known and widely used.

[vipin]

thanks for putting the time Sir, Yes you are correct , since key file and password file both are available so decryption can be surly possible but it might not be possible via tm1cript.exe , any other third party tool may work for decrypting it. Anyways can I have your good name Sir.. ? immense pleasure exploring and solving queries with you in the current journey of TM1.. thanks again !!!

[qml]

Anyways can I have your good name Sir.. ?

I have to apologise, I am having some trouble interpreting this sentence. If you are asking for my name (of which this would be a wonderfully elegant, if slightly quaint, way of doing) then it's right there, in the footer of my every post.
V
V
V

[vipin]

ok Kamil..... Thanks !!