Video Clip .cvx User forgot password

[Kevin.Tucker]

I have an end user that pulled a video clip, VSOM 7.0, and password protected it. Now the video needs to be viewed and the password has been forgoten. Is there anyway to crack the video open so that it can be viewed?

[Scott Olsen]

This is *highly* unlikely, as I believe the payload is encypted with AES-128, but there is always a chance the implementation is somehow flawed, or could be simply brute-forced. (I doubt this)

Is there a tool to do this?  Nope.  Not that I know of.  I'd be willing to take a crack (pun intended) at brute force decrypting it as an experiment, but I doubt your end user or company would allow providing me the encrypted clip.

My only other recommendation would be sending the user to a professional hypnotist as a last ditch effort to retrieve the passphrase :-P

In all seriousness though, good luck, and I hope you find a way to retrieve the video footage.

[driker023]

Download VLC player and open the file with VLC.

This is the work around to play password protected files that have been forgotten.

[Scott Olsen]

!!

I don't believe you :-P  I'm going to test this myself.  It would mean that the payload isn't protected *at all* and effectively has zero value.

Be Right Back...

Scott Olsen
Solutions Specialist
Bulletproof Solutions Inc.
Web: www.bulletproofsi.com

[driker023]

Scotty, How you making out over there?

[Scott Olsen]

Update!

Daniel / Kevin,  I wasn't able to simply throw a .CVX clip at VLC and have it play like you suggested, but it *DID* get me curious enough to verify whether or not the payload is actually encrypted vs. signed-only.  A quick look at the statistical historgram of each file indicates it is only using the crypto to sign the authenticity of the payload video.

I found that if you strip off the first 50 bytes of data from the CVX container, you can then either:

- play the modified file with VLC

... or...

- simply change the extension to .CVA

... and you should be able to review the video.

I may pick away more at this later.

Scott Olsen
Solutions Specialist
Bulletproof Solutions Inc.
Web: www.bulletproofsi.com