Re: How to recover encrypted files on an NTFS volume?



Only if you:
1) Know the password of your account at the time you encrypted the files
2) Still have the *original* profile files with the DPAPI protected key material *from that time*

Alternatively.
1) You exported the user's efs encryption certificate and private key
2) You exported the original local administrator's recovery certificate and private key (assuming no domain)
3) You were part of a domain, and the domain admins have the EFS recoveyr agent's certificate and private key
4) The certificate is not self signed, and issued by an enterprise CA. The certificate is based on a custom v2 certificate template and was issued by a CA that implemented key archival

My guess, based on your scenario.
The files are gone.
Brian

"DoB" <DoB@xxxxxxxxxxxxx> wrote in message news:OYtBrFAAJHA.4528@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

Once I encrypted a few files on an NTFS volume on my local w2000 system
and... forgot about it.

In the meantime I changed my hardware and reinstalled my system many times,
but the files were copied each time to a new volume, by disk cloning or by simple
copying.

The question is... can I decrypt them? I believe I should remember the username
and password which was used when I encrypted the files, but I did not export
any certificates.

I know about two commercial programs that recover such files, but I am seeking
a free solution - the files are not worth it.

I found two free and simple solutions to my problem, basing of the fact that
w2000 local administrator is able to decrypt the files.
The solutions do not work, i get the "access denied" error or something similar.

Is it possible to decrypt my files for free?

DoB.


.



Relevant Pages

  • Re: CryptAPI(encryption/decryption)
    ... It seems like you're missing the Base64 decode step when trying to decrypt ... I misspelled the Private Key as Primary Key. ... Is there any variation in the encryption format in openssl compared to ... "Dylan DSilva " wrote: ...
    (microsoft.public.pocketpc.developer)
  • Re: CryptAPI(encryption/decryption)
    ... The openssl encrypted data format is in bigendian ... Is there any way I can import the PEM formated private key to the MS CSP ... I'm decoding the base64 encoded data before trying to decrypt. ... Is there any variation in the encryption format in openssl compared ...
    (microsoft.public.pocketpc.developer)
  • Re: DRA is Decrypting Files when it shouldnt be!!!
    ... > EFS is allowing the RA to decrypt 200 files that were encrypted BEFORE an RA ... > encryption to get the RA to decrypt encrypted files. ... the default RA certificate was used. ... certificate and private key only when needed). ...
    (microsoft.public.windowsxp.security_admin)
  • Re: CryptAPI(encryption/decryption)
    ... since symmetric encryption is faster than public key encryption. ... As per your reply I could get the handle of the private key. ... possible for B to decrypt the data using his Private Key. ... The PFX format encrypts the private key with the user supplied password ...
    (microsoft.public.pocketpc.developer)
  • Re: No way to encrypt with private key in C#?
    ... 1)if a file is encrypted with the private key, ... 2)if a file is encrypted with the public key, ... The two ways are usually called encryption and signing, from public to private and back again. ... There is nothing prohibiting an application using RSA to "encrypt" the entire file using the private key and release it, so that everyone that wants to use it must first decrypt it with the public key. ...
    (microsoft.public.dotnet.languages.csharp)