From Dogbert's blog:
Sony has a line of laptops ('Vaio') which compete mainly in the high value market segments. They implemented a master password bypass which is rather sane in comparison to the rest of the bunch:
- The randomly generated master password is only stored in RAM, e.g. it's lost after the next reboot ('one time password').
- RSA is used for encrypting the password which is then converted to a human-readable form (4x4 characters/8 bytes/64 bits).
- Their customer support apparently allows for one free password generation per device which is pretty decent by the industry standard.
Dogbert claims he was able to factor the password used to encrypt the OTP key because Sony used a key lenght of 64bits. And did this using an unoptimized python implementation of a general number sieve in less than a minute.
I was not aware that such small key length was even possible for RSA (I think pycrypto will not allow anything below 1024).
- Apr 17, 2013 Download S/Key (One-Time password) Generator for free. S/Key Generator. An RFC2289 compliant One-Time Password generator written in Java language and O.S.
- I have a Sony Vaio laptop I'm trying to unlock for an old employee. It has a BIOS password that locks it from booting at all. After 3 incorrect.
With a key (D63K-XFVF-TK7H-RJKX) and a password (43878945) is it really that easy to figure out the scheme used? How should I approach the problem?
[UPDATE]
First of all, RSA works for any size modulus. 10 bits, 32 bits, 64 bits, 1 million bits. I'm having a hard time seeing exactly what the question is. You are given the key (D63K-XFVF-TK7H-RJKX). Is that key the RSA key? That key then encrypts the password (43878945)? Or is that key the result of encrypting the password with RSA? – mikeazo 2 days ago
Results of sony vaio onetime password generator torrent: free download. software, Free Video dowloads, Free Music downloads, Free Movie downloads, Games.
@mikeazo: it is a challenge-response theft protection. Type the wrong password 3 times and you will be presented the 16 character challenge. You call Sony customer support, fax them a proof of purchase and based on the challenge they will give you a password. You can't brute-force it because it changes every time.
@Schwartz: of course, Dogbert disassembled the Sony Vaio BIOS and got the public key! Calculating the private key was the easy step... I was not thinking like a hardware hacker, thanks!
closed as unclear what you're asking by Ilmari Karonen, John Deters, poncho, e-sushi, DrLecterJan 3 '15 at 9:31
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
2 Answers
$begingroup$If they pad the key with some fixed value and apply RSA directly to it then it is just a textbook RSA scheme which is vulnerable to meet-in-middle attack: it runs roughly in time $2^{40}$ and requires $2^{32}$ space.
I think that number OTP 4x4 XXX-XXXX-XXXX-XXXX is in Base64 Alphabet, so convert this to Decimal and you have a big Integer. Factorize, and you'll obtain a couple of primes numbers, with which you can to generate a public and private key. With those keys, using the Euler law (RSA Encryption base) you can decipher the password.
figlesquidgeNot the answer you're looking for? Browse other questions tagged rsafactoring or ask your own question.
Advanced Password Generator is a application designed ...
DateSep 25, 2014
AuthorSegobit Software
Size:257.0 KB
LicenseShareware
Price:$20.00
Platform Win2000 , Win98 , WinOther , WinServer
CategorySecurity & Privacy - Password Managers
Password Generator PPC allows to generate ... alphanumeric and/or alphabetic characters password.Program can use special characters.Password Generator PPC can generate random ...
DateSep 25, 2014
AuthorSegobit Software
Size:45.0 KB
LicenseShareware
Price:$12.00
Platform Windows CE , Windows Mobile 2003 , Windows Mobile 2005
CategorySecurity & Privacy - Password Managers
Password Generator Professional 2007 is a ... secure and ultra fast password generator! Create: passwords, login ... ...
DateSep 25, 2014
AuthorPassword Generator Professional 2007
Size:2.9 MB
LicenseShareware
Price:$29.95
Platform Win , WinXP , Windows 2000 , Windows 2003
CategorySecurity & Privacy - Password Managers
X-Lizard Password Generator is a software program ... You can copy the password to the clipboard or ... to file. X-Lizard Password Generator is a stylish and ...
DateSep 25, 2014
AuthorSoftkhoz Studio Ltd.
Size:1.8 MB
LicenseFreeware
Price:Free
Platform Win98 , WinME , WinNT 3.x , WinNT 4.x
CategorySecurity & Privacy - Encryption Tools
The Quicky Password Generator is fast, efficient, and ... ...
Vaio One Time Password
DateSep 25, 2014
AuthorQuicky Software
Size:610.0 KB
LicenseShareware
Price:$19.95
Platform Windows All
CategorySecurity & Privacy - Encryption Tools
AQL Secure Password Generator (http://www.aqlsoft.com ... the length of your password from 4 to 128 ... punctuation passwords. 3. Copy password to clipboard. 4. Support ...
DateSep 25, 2014
AuthorAQLSoft
Size:851.0 KB
LicenseShareware
Price:$29.95
Platform Win 98/ME/XP/2000/2003
CategorySecurity & Privacy - Encryption Tools
AB Password Generator creates random passwords. It can generate one random password or a list of ... generate only one, the password will be shown in ... choose that your generated password to contain letters and/or ...
DateSep 25, 2014
AuthorAB Software
Size:1.5 MB
LicenseShareware
Price:$10.00
Platform Windows All
CategorySecurity & Privacy - Encryption Tools
... presents a completely free password generator for your computer. Considering ... other things, a free password generator can be an extremely ... services and any other password-protected features that you ...
DateSep 25, 2014
AuthorPassBoom Software
Size:977.0 KB
LicenseFreeware
Price:Free
Platform WinVista , WinVista x64 , WinXP , Win7 x32
CategorySecurity & Privacy - Password Managers
EPG Pro is a password generator utility which allows users ...
DateSep 25, 2014
AuthorSalo Storm Software
Size:454.0 KB
LicenseFreeware
Price:Free
Platform Windows All
CategorySecurity & Privacy - Encryption Tools
Advanced Random Password Generator (pwdGen) is utility that ... a robust random number generator. The password generator can use different customizable ... select length of the password. The program includes database ...
DateSep 25, 2014
AuthorRF1 Systems
Size:646.0 KB
LicenseShareware
Price:$14.95
Platform Windows All
CategoryUtilities - System Utilities
RVL Password Generator can generate millions of ...
DateSep 25, 2014
AuthorRVL Soft
Size:409.6 KB
LicenseFreeware
Price:Free
Platform Win XP/Vista
CategorySecurity & Privacy - Encryption Tools
Arusoft Password Generator is a program designed ... and quickly. Using Arusoft Password Generator, you can easily create ... easy to use.Arusoft Password Generator is a program that ...
DateSep 25, 2014
AuthorArusoft Inc.
Size:392.0 KB
LicenseShareware
Price:$14.95
Platform Windows All
CategorySecurity & Privacy - Encryption Tools
An easy to use password generator. PASSWORD Boy is a free ultra password generator. It allows you to ... numbers and symbols. Using Password Generator you do not have ... think out new passwords. PASSWORD Boy will do it ...
DateSep 25, 2014
Authorpasswordboy.com
Size:1.3 MB
LicenseFreeware
Price:Free
Platform Macintosh
CategorySecurity & Privacy - Password Managers
Random Password Generator Expert is a full ... and character content. Random Password Generator Expert is a full ... to create and administer password protected systems, but can ...
DateSep 25, 2014
AuthorSoftDemon
Size:594.0 KB
LicenseShareware
Price:$17.00
Platform Windows
CategoryDesign & Photo - Editors
Password Generator is a software program ... as well as numerals. Password Generator is a software program ... as well as numerals. Password Generator is freeware. You will ...
DateSep 25, 2014
AuthorZQS Software Team
Size:517.0 KB
LicenseFreeware
Price:Free
Platform Windows
CategoryDesign & Photo - Editors
Easy-to-use random password generator for individual computer users ... mask after your corporate password policy and never worry ... administrators! An industrial strength password or number generator for the individual home ...
DateSep 25, 2014
AuthorAccuSolve, Inc.
Size:3.1 MB
LicenseShareware
Platform 9x/NT/2000/ME/XP
CategorySecurity & Privacy - Encryption Tools
Password Generator Professional 2008 is a ... secure and ultra fast password generator! Create: passwords, login ...
DateSep 25, 2014
AuthorKristanix Software
Size:3.2 MB
LicenseShareware
Price:$29.95
Platform Windows , WinXP , Windows 2000 , Windows 2003
CategorySecurity & Privacy - Password Managers
SoftFuse Password Generator Pro is a professional ... easily and quickly. Using password generator, you can create extremely ... passwords. While generating a password, you can use letters ...
DateSep 25, 2014
AuthorSoftFuse Development
Size:790.0 KB
LicenseShareware
Price:$39.95
Vaio One Time Password Keygen
Platform Windows , Win2000 , WinVista , WinVista x64
CategorySecurity & Privacy - Password Managers
SoftFuse Password Generator generates difficult-to-crack ... accounts! While generating a password, you can use letters ... More info at: www.password-generator.com/password-generator.html Protect you important ...
DateSep 25, 2014
AuthorSoftFuse Development
Size:703.0 KB
LicenseShareware
Price:$24.95
Platform Win95 , Win98 , WinME , WinNT 3.x
CategorySecurity & Privacy - Access Control
Password Generator Professional 2006 is a ... secure and ultra fast password generator! Create: passwords, login ...
DateSep 25, 2014
AuthorKristanix Software
Size:2.9 MB
LicenseShareware
Price:$29.95
Platform Windows All
CategorySecurity & Privacy - Encryption Tools
- 1EverNote1658
- 2MusicBee1808
- 3VLC media player (VideoLAN)5440
- 4Bruce`s Unusual Typing Wizard1176
- 5Pidgin1992
- 6FlashGet1112
- 7Mozilla Thunderbird1062
- 8Adobe Reader1040
- 9Nokia PC Suite1978
- 10Mozy Remote Backup1107
- 11UltraSurf2290
- 12ACDSee571
- 13Free Opener1077
- 14doPDF963
- 15Firefox for Mobile1480
- 1hide.me VPN for Windows4
- 2Q2ID52
- 3DVDFab DVD Ripper1
- 4DataNumen SQL Recovery15
- 5Icecream Screen Recorder133
- 6NoteBurner Spotify Music Converter1
- 7FTPGetter Professional51
- 8AnyMP4 MP4 Converter1
- 9BS1 Professional Time Billing1
- 10SMS Deliverer Enterprise1
- 11NetCrunch Tools35
- 12Midi Tab Player1
- 13Dr.Web CureIt32
- 14BriskBard1
- 15BestCrypt Container Encryption176
- 1Registry Compactor499
- 2Multilevel Menu Html Samples122
- 3Fashion Star Play Online128
- 4C Tetris Free720
- 5Access Point Info694
- 6Linux Hidden Online Play170
- 7Free Scan Mac261
- 8Mail Master226
- 9Proxy Fire Orange869
- 10Karaoke Midi Player157
- 11Windows Media Music Player80
- 12Pdf Tabbed Documents87
- 13Big Tiff Viewer Mac743
- 14Palm Pre Vpn Cisco133
- 15Dbx Phone Sony E354
- 1Sony Vaio Bios Onetime Password Generator1
- 2Reverse Onetime Password Generator81
- 3Free Bios Password Generator269
- 4Ibm Bios Password Generator227
- 5Password Master Sony Vaio307
- 6Phoenix Bios Password Generator128
- 7Access Random Password Generator452