Endpoint Encryption

 View Only
Expand all | Collapse all

file decrypt

  • 1.  file decrypt

    Posted Feb 21, 2019 08:11 PM

    is there any way to decrypt a file from an old system that used "Symantec Endpoint Encryption" while knowing the password ? The file comes from a backup of an old system that no longer exists. 

    What options do I have, short of installing and configuring a full encrypted system ? I have the file, I know the password... I want my data back! :D 



  • 2.  RE: file decrypt

    Posted Feb 21, 2019 08:14 PM

    header looks like this 

     

    <?xml version="1.0" encoding="UTF-16"?>
    <!--GETRSFileHeaderSize=0x000008B4-->
    <GETEncryptedDataFile version="x.x.x">
    <FileInformation>
    <filename>E:\My doc\Contracts\ED14C010
    </filename>
    <created>Fri, 06 Jan 2017 14:52:28 UT+0800
    </created>
    </FileInformation>
    <AlignmentLength>512
    </AlignmentLength>
    <WrappedKeys iv="XXXXXXXXXXX==" hash="XXXXXXXXXXXXX=">
    <Password hashmethod="kdf2">
    <wrappedkey>XXXXXXXXXXXXXX=
    </wrappedkey>
    </Password>
    <Certificate hashmethod="kdf2">
    <wrappedkey method="rc4">
    XXXXXXXXXXXXXXXXXXXXXXXX==
    </wrappedkey>
    </Certificate>
    </WrappedKeys>
    </GETEncryptedDataFile>


  • 3.  RE: file decrypt

    Posted Feb 22, 2019 02:57 PM

    You would need the software to do this. I don't think it's possible to use anything else but the application used to encrypt it in the first place.



  • 4.  RE: file decrypt

    Posted Feb 23, 2019 04:24 AM

    there is no "decrypt only" tool available ? that's a shame... could be usefull not just for my case but for "encrypted file exchange"... 



  • 5.  RE: file decrypt

    Posted Feb 23, 2019 05:07 PM

    Have a look here, but not sure if it's going to be of any help:

    https://www.symantec.com/connect/forums/how-decrypt-unmanaged-client-endpoint-encryption-software

    They are mentioning Symantec Drive Encryption...not sure if it will work with what you have now. Comes with Encryption Desktop.



  • 6.  RE: file decrypt

    Posted Feb 24, 2019 10:23 PM

    like most of the resources i found the one above mentioned discusses the decryption of a drive... in my case is a single file... 

    i guess i'll have to setup a new virtual machine and then install the full Symantec Encryption suite... pain in the *&^%$# for a single file....

     



  • 7.  RE: file decrypt

    Posted Feb 25, 2019 01:38 AM

    Yes, unfortunately that's the only way to go.



  • 8.  RE: file decrypt

    Posted Feb 25, 2019 02:38 AM

    is there any virtual image (parallells?) that can be downloaded for a painless experience?



  • 9.  RE: file decrypt

    Posted Feb 25, 2019 08:06 AM

    Virtual image for? Not sure what OS you're running on your desktop, but if you need to virtualise the PC in question, you'd just get hold of a trial version of what desktop virtualisation player you have and install it. If you're talking about running a VM for the SEE, then it should be possible to



  • 10.  RE: file decrypt

    Posted Feb 26, 2019 12:46 AM

    I was thinking of a "ready made" SEE VM that i can just load in Parallels, decrypt my file and then remove the VM.... So I wouldnt need to go trhough the pain of installing evertying from scratch... (just looking for shortcuts) :D
     



  • 11.  RE: file decrypt

    Posted Feb 26, 2019 01:35 AM

    No, I've never seen that. I suspect you mean an appliance which they don't have available for download on their site.

     



  • 12.  RE: file decrypt

    Posted Feb 26, 2019 04:08 AM

    or a 3rd party build, i dont mind... :D 

    if i end up building one, i might do someone a favor an share it (if doesn't break any t&c)