

"salt", "verifier", and "verifierHash" can be extracted from FILEPASS record in Excel file. H1 = hashlib.md5((h0 + salt) * 16).digest()ĭef test_pass(pwd, salt, verifier, verifierHash): The second link is what contents to be encrypted.Īfter understanding the Excel password, I code the python for testing the password test_xls_pass.py. The first link is how the RC4 key is generated and what is stored in xls file. After some searching, I found the Microsoft Document I knew the default Office 2003 encryption algorithm is RC4. I decided to read the encryption algorithm.

When I tried to use their trial tools, there is a instant recovery feature.

I could not find a free tool to break it.
