[BBLISA] Password-protected PDF file?

John Orthoefer jco at direwolf.com
Sun Feb 17 10:41:38 EST 2013


I've looked at it, and it seemed to me that it was pretty straight forward to build a cracker for it.    There are commercial "Password recovery" programs.  

This isn't a bad summary...

http://www.cs.cmu.edu/~dst/Adobe/Gallery/anon21jul01-pdf-encryption.txt

and I think the answer to your question is....
Adobe's PDF protection scheme is a classic example of security
throughd obscurity.  They encrypt the content of a PDF file and hope
that no one figures out how to decrypt it.
personally I would use gpg for email.

John Orthoefer
jco{at}direwolf.com




On Feb 17, 2013, at 8:53 AM, Scott Ehrlich <srehrlich at gmail.com> wrote:

> How safe is a password-protected PDF file sent via email?
> 
> I've never run a sniffer to see what could be learned from doing this.
> 
> Thanks.
> 
> Scott
> 
> _______________________________________________
> bblisa mailing list
> bblisa at bblisa.org
> http://www.bblisa.org/mailman/listinfo/bblisa

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.bblisa.org/pipermail/bblisa/attachments/20130217/543509cb/attachment.htm 


More information about the bblisa mailing list