<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
I usually wouldn't ask for help on this, but I've run into a road block updating the DRS Backup Decrypter to be fully compatible with recent UCOS releases. The file decryption works, but not the "Guess Cluster Security Password" function. UCOS versions released
in the last year or so started using a new hashing algorithm on the encrypted cluster security password when running backups. They were using PBEWithMD5AndDES but switched to <span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;">PBEWithHmacSHA1AndDESede.
The problem is that I can't find a direct .NET replacement for this algorithm.</span>
<div><br>
</div>
<div>The <span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;">PBKDF2WithHmacSHA1 algorithm gives near identical output to
<span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;">
PBEWithHmacSHA1AndDESede </span>and does have a direct .NET replacement, Rfc2898DeriveBytes. It almost looks like
<span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px; background-color: rgb(255, 255, 255);">
<span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px; background-color: rgb(255, 255, 255);">PBE</span><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px; background-color: rgb(255, 255, 255);">WithHmacSHA1AndDESede
is generating the same output as <span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px; background-color: rgb(255, 255, 255);">PBKDF2WithHmacSHA1
but also </span></span>applying a </span>XOR mask to the LSB of each output byte after the last iteration. My first thought was that it was performing a 3DES encryption afterwards, but that should affect more than just the LSB of each byte. Here are sample
outputs from hashing two different passwords.</span><br>
<span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px;"></span>
<div><br>
</div>
<div><span style="font-family: 'Lucida Console', Monaco, monospace; font-size: 10pt;">H</span><span style="font-family: 'Lucida Console', Monaco, monospace; font-size: 10pt;">ashing password "testpassword1"</span>
<div><span style="font-family: 'Lucida Console', Monaco, monospace; font-size: 10pt;">
<div>Results after 1024 iterations...<br>
</div>
<div>Secret key encoded PBEWithHmacSHA1AndDESede: EA914F4C49311C6E9D57EAE0EAD0B03170EFA7E3ECF86189</div>
<div>Secret key encoded PBKDF2WithHmacSHA1 : EB914E4C49311C6F9D57EAE1EBD1B13071EEA7E3EDF96088<br>
</div>
<div><br>
</div>
<div><span style="font-family: 'Lucida Console', Monaco, monospace; font-size: 10pt; background-color: rgb(255, 255, 255);">H</span><span style="font-family: 'Lucida Console', Monaco, monospace; font-size: 10pt; background-color: rgb(255, 255, 255);">ashing
password "testpassword2"</span><br>
</div>
<div>
<div>Results after 1024 iterations...</div>
<div>Secret key encoded PBEWithHmacSHA1AndDESede: 49B0F2DCF2434C239240F4078FEF6BAE34C43B6E910E4C1A</div>
<div>Secret key encoded PBKDF2WithHmacSHA1 : 49B0F3DCF2434D229340F5078FEE6AAE34C43B6E900E4D1B<br>
<br>
</div>
</div>
</span></div>
<div><span style="font-size: 12pt;">If anyone knows a guy who knows a guy with experience in this area, please feel free to send them my way. I'd like to spend more time and solve this one on my own, but I've been working on this quite a bit lately and ignoring
my "domestic duties". Wife and I had our 14th anniversary this week; I'd really like to make it to 15! Any help figuring out the hashing issue is definitely appreciated.</span></div>
<div><br>
</div>
<div>Thanks,<br>
</div>
</div>
</div>
<div><span style="font-family: Calibri, Arial, Helvetica, sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', NotoColorEmoji, 'Segoe UI Symbol', 'Android Emoji', EmojiSymbols; font-size: 16px; background-color: rgb(255, 255, 255);">Pete</span></div>
</div>
</body>
</html>