ElcomSoft Distributed Password Recovery
High-Performance Distributed Password Recovery
Break complex passwords, recover strong encryption keys and unlock documents in a production environment. Elcomsoft Distributed Password Recovery is a high-end solution for forensic and government agencies, data recovery and password recovery services and corporate users with multiple networked workstations connected over a LAN or the Internet. Featuring unique acceleration technologies and providing linear scalability with no overhead, Elcomsoft Distributed Password Recovery offers the fastest password recovery by a huge margin, and is the most technologically advanced password recovery product currently available.
Features and Benefits
Hardware acceleration (patented) reduces password recovery time by a factor of 50
Support for NVIDIA CUDA cards and AMD Radeon HD graphics cards as hardware accelerators
Linear scalability with no overhead allows using up to 10,000 workstations without performance drop-off
Allows up to 32 CPUs or CPU cores and up to 8 GPUs per processing node
Broad compatibility recovers document and system passwords to various file formats Brute-force and dictionary attacks
Distributed password recovery over LAN, Internet or both
Console management for flexible control from any networked PC
Plug-in architecture allows for additional file formats
Schedule support for flexible load balancing
Minimum bandwidth utilization saves network resources and ensures zero scalability overhead
All network communications between password recovery clients and the server are securely encrypted
Flexible queue control allows easy job management
Storing all passwords that have been discovered, forming a separate/internal dictionary (password cache)
Install and remove password recovery clients remotely
Launch agents and server as system services
Keep track of CPU time and resource utilization, password recovery jobs and user activities
Industry certified: Microsoft Gold Certified Partner, Intel Software Partner, NVIDIA Developer Support
Hardware Acceleration
ElcomSoft has pioneered many software innovations that have made it easier to recover lost passwords from the operating system, Microsoft Office products, Adobe PDF files, Intuit Quicken, OpenOffice, ZIP and RAR archives and a variety of other applications. The latest development revolutionizes the speed of password recovery without requiring expensive hardware.
Elcomsoft Distributed Password Recovery employs a revolutionary, patented technology to accelerate password recovery when a compatible NVIDIA or AMD graphics card is present in addition to the CPU-only mode. Currently supporting all GeForce boards from 400 to 1000-series GPUs including (as well as NVIDIA Quadro and Tesla) and AMD Radeon HD from 5000-series to R2/R4/R7/R9 GPUs, the acceleration technology offloads parts of computational-heavy processing onto the fast and highly scalable processors featured in the latest graphic accelerators.
The acceleration technology developed by ElcomSoft allows the execution of mathematically intensive password recovery code on the massively parallel computational elements found in modern graphic accelerators. The GPU acceleration is unique to Elcomsoft Distributed Password Recovery, making password recovery up to fifty times faster compared to password recovery methods that only use the computer’s main CPU.
| Application family | Applications | Extensions | Type of recovery | Password types | Hardware Acceleration |
|---|---|---|---|---|---|
| ZIP archives | PKZip, WinZip | .ZIP, .EXE | password | file opening password | NVIDIA |
| ZIP archives | WinZip (AES) | .ZIPX. .EXE | password | file opening password | NVIDIA |
| RAR archives | RAR/WinRAR 3/4/5 | .RAR | password | file opening password | NVIDIA |
| Microsoft Office 2007 | Word, Excel, PowerPoint, Project | .DOCX, .XLSX, .PPTX, .MSPX | password | file opening password | NVIDIA, AMD |
| Microsoft Office 2007 | Access | .ACCDB | password | file opening password | - |
| Microsoft Office 2010 | Word, Excel, Access, PowerPoint, OneNote | .DOCX, .XLSX, .ACCDB, .PPTX, .ONE | password | file opening password | NVIDIA, AMD |
| Microsoft Office 2013 | Word, Excel, Access, PowerPoint, OneNote | .DOCX, .XLSX, .ACCDB, .PPTX, .ONE | - | - | NVIDIA, AMD |
| Microsoft Office XP/2003 | Word, Excel, PowerPoint | .DOC, .XLS, .PPT | password | "open" password only | - |
| Microsoft Office 97/2000 | Word, Excel | .DOC, .XLS | password | "open" password only | - |
| Microsoft Office 97/2000 | Word, Excel | .DOC, .XLS | key | "open" password only - guaranteed decryption | - |
| - | Microsoft OneNote | .ONE | password | - | - |
| - | Microsoft SQL Server | .MDF | password | - | NVIDIA, AMD |
| - | Microsoft SQL Server Compact | .SDF | password | - | NVIDIA, AMD |
| OpenDocument (OpenOffice, StarOffice etc) | word processing (text) documents | .ODT, .OTT, .SXW, .STW | password | - | NVIDIA, AMD |
| OpenDocument | spreadsheets | .ODS, .OTS, .SXC, .STC | password | - | NVIDIA, AMD |
| OpenDocument | presentations | .ODP, .OTP, .SXI, .STI | password | - | NVIDIA, AMD |
| OpenDocument | graphics/drawing | .ODG, .OTG, .SXD, .STD | password | - | NVIDIA, AMD |
| OpenDocument | formulae, mathematical equations | .ODF, .SXM | password | - | NVIDIA, AMD |
| - | Microsoft Money | .MNY | password | - | - |
| - | Intuit Quicken1 | .QDF | password | - | - |
| Hangul Office 2010 | Hanword | .HWP | password | - | - |
| Hangul Office 2014 | Hanword | .HWP | password | - | - |
| Hangul Office 2010 | Hancell | .CELL | password | - | NVIDIA, AMD |
| Hangul Office 2014 | Hancell | .CELL | password | - | NVIDIA, AMD |
| PGP and Open-Key Passwords | PGP zip archives | .PGP | password | - | NVIDIA |
| PGP and Open-Key Passwords | PGP secret key rings | .SKR | password | - | NVIDIA |
| PGP and Open-Key Passwords | PGP disks with conventional encryption | .PGD | password | - | NVIDIA |
| PGP and Open-Key Passwords | PGP self-decrypting archives | .EXE | password | - | - |
| PGP and Open-Key Passwords | PGP whole disk encryption | - | password | - | NVIDIA |
| PGP and Open-Key Passwords | Personal Information Exchange certificates - PKCS #12 | .PFX, .P12 | password | - | NVIDIA |
| IKE | Internet Key Exchange (IKE) passwords | - | password | - | NVIDIA, AMD |
| TrueCrypt | TrueCrypt disk encryption | - | password | - | NVIDIA |
| TrueCrypt | TrueCrypt encrypted containers | - | password | - | NVIDIA |
| BitLocker | BitLocker and BitLocker To Go disk encryption | - | password | - | NVIDIA, AMD |
| - | MD5 hashes | - | password | plaintext passwords | NVIDIA |
| - | Salted MD5 hashes | - | password | plaintext passwords | NVIDIA |
| - | SHA-1 | - | password | plaintext passwords | NVIDIA, AMD |
| - | SHA-256 | - | password | plaintext passwords | NVIDIA, AMD |
| - | SHA-512 | - | password | plaintext passwords | NVIDIA, AMD |
| Adobe Acrobat PDF X/XI/DC | PDF with 256-bit encryption | password | "user" and "owner" password | - | |
| Adobe Acrobat PDF 9.x | PDF with 256-bit encryption | password | "user" and "owner" password | NVIDIA | |
| Adobe Acrobat PDF 6-8 | PDF with 128-bit encryption | password | "user" and "owner" password | - | |
| Adobe Acrobat PDF | PDF with 40-bit encryption | password | "user" and "owner" password | - | |
| Adobe Acrobat PDF | PDF with 40-bit encryption | key | "user" password - guaranteed decryption | - | |
| System Passwords | Microsoft Windows NT, 2000, XP, 2003, Vista | - | password | logon passwords (LM/NTLM) | NVIDIA |
| System Passwords | Microsoft Windows | - | password | SYSKEY startup passwords | - |
| System Passwords | Microsoft Windows | - | password | DCC (Domain Cached Credentials) passwords | NVIDIA, AMD |
| System Passwords | UNIX | - | password | users’ passwords | - |
| System Passwords | Mac OS X | login.keychain | password | keychain password | NVIDIA |
| System Passwords | Mac OS X | - | password | user’s passwords | NVIDIA |
| - | Mac OS X | FileVault | password | master password | NVIDIA |
| - | Mac OS X | DMG | password | master passwords | NVIDIA |
| Password managers | KeePass | .KBDX, .KBD, .PWD | password | master password | NVIDIA, AMD |
| System Passwords | Wireless networks | - | password | WPA and WPA2 passwords | NVIDIA, AMD, AVX2 |
| - | Lotus Notes (RC2) | .ID | password | - | - |
| - | Lotus Notes (AES) | .ID | password | - | NVIDIA, AMD |
| - | Lotus Notes | admindata.xml | password | - | - |
| - | Oracle | password | users’ passwords | - | - |
| - | TheBat! | masterkey.dat | password | master passwords | - |
| - | TheBat! | .TBK | password | passwords to backups | - |
| - | Mozilla, FireFox, Thunderbird | - | password | master passwords | - |
| iPhone/iPod/iPad backup | iTunes | - | password | - | NVIDIA, AMD |
| BlackBerry backup | BlackBerry Desktop Software (old) | .IPD, .BBB | password | - | AES-NI[1] |
| BlackBerry backup | BlackBerry Desktop Software (6.0+ for Windows, 2.0+ for Mac) | - | password | - | NVIDIA, AMD |
| Apple iWork '09 | Pages, Numbers, Keynote | .pages, .numbers, .key | password | password to open | NVIDIA, AMD |
| Apple iWork 2013/2014 | Pages, Numbers, Keynote | .pages, .numbers, .key | password | password to open | NVIDIA, AMD |
Important note: hardware acceleration (for specific file formats and algorithms only, see the above chart for details) works properly only on Windows Server 2003/2008/2012 and Windows 7/8/8.1/10 (32-bit or 64-bit); specific versions of NVIDIA/AMD drivers are required; some other restrictions apply (e.g. for some file formats, it is implemented for brute-force attack only, while dictionary attack only works on the CPU, regardless the settings).
Mac OS Forensics
Elcomsoft Distributed Password Recovery recognizes the importance of Mac OS X, offering extensive support for a wide range of password protecting various aspects of the system. The tool enables investigators breaking into encrypted volumes protected with FileVault 2, accessing encrypted DMG files and recovering OS X user account passwords. In addition, Elcomsoft Distributed Password Recovery can recover OS X keychain passwords.
How GPU Acceleration Works
Using brute force attack to recover passwords, it is possible, though time-consuming, to recover passwords from popular applications with the power of the computer’s main CPU. For example, an eight-character Windows Vista logon password is as strong as about 55 trillion possible passwords. Windows Vista uses NTLM hashing by default, so using a modern dual-core PC you could try up to 10 million passwords per second, and perform a complete analysis in about two months. With ElcomSoft’s new GPU acceleration technology, the process would take only three to five days, depending upon the CPU and GPU.
Until recently, graphic cards’ processing units could not be used for applications such as password recovery. Older graphics chips could only perform floating-point calculations of varying precision, while most cryptographic algorithms require precise fixed-point mathematics.
The modern chips can process fixed-point calculations. With several hundred or even thousand processing units, these powerful GPU chips are much more effective than CPUs in performing many of these calculations.
By utilizing the new processing power offered by today’s GPUs (currently, all GeForce from 400- to 1000-series GPUs, NVIDIA Quadro, NVIDIA Tesla and AMD Radeon from 5000 to R9 series GPUs are supported) ElcomSoft offers the recovery speed increase by a factor of twenty, simply by hooking up with a cheap video card’s onboard GPU. High-end PC motherboards can work with as many as four video cards, allowing for even faster password recovery applications for extremely modest increase in hardware costs.
Benchmarks?
Networking
Linear Scalability
Unlike competition, Elcomsoft Distributed Password Recovery is not ‘virtually’ or ‘practically’ linear in scalability. By doubling the number of PCs working on a password, you cut time required to recover a password by half.
By only transferring the bare minimum of information over the network, Elcomsoft Distributed Password Recovery allows for massively parallel operation, and scales linearly to as many as 10,000 workstations with no scalability overhead.
Distributed Recovery, Control via Management Console
Elcomsoft Distributed Password Recovery enables distributed work over the LAN, Internet, or both. Minimum bandwidth requirements ensure no scalability overhead even for the slowest connections.
The convenient management console allows controlling Elcomsoft Distributed Password Recovery from any networked PC.
Industry Certified, Used by the Government
ElcomSoft has obtained numerous certifications over the years, maintaining the following certification levels: Microsoft Gold Certified Partner, Intel Software Partner, and NVIDIA Developer Support.
Password recovery software by ElcomSoft is being used by numerous government agencies and forensic organizations all over the world.