Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to connect to a VPN using Cisco VPN Client in-build on Mac Snow Leopard. The problem is that I have only the encrypted password. I tried some web sites to decrypt the password, but it does not work. Any idea?

share|improve this question
If you're asking how to decrypt 512-AES, SHA-1 Hashing w/ ESP you are very mistaken on how VPNs (Or encryption) work. – Zephyr Pellerin Oct 1 '10 at 15:28
He could very well be talking about the "encrypted" password located in the pcf file, which, by all accounts, is extremely trivial to crack. – GregD Nov 1 '10 at 13:31
Yes GregD. But it is not trivial for me. – rtacconi Nov 2 '10 at 8:49

If you could decrypt it without a supercomputer and a few thousand years of computing cycles, that would be a serious security flaw, wouldn't it?

You might have to work on having the password changed on the host or going for the documentation of the sysadmins that set it up.

share|improve this answer

This definitely is possible.

There is a known vulnerability with the group password encryption implementation.

Here is C source code that demonstrates the vulnerability:

I've successfully used this code to decrypt an encrypted group password for use with the built-in OS X 10.6 VPN client.

If some of the online tools or the source code above do not work for you then perhaps Cisco have a different implementation in the VPN implementation you're using.

share|improve this answer

If you're talking about the pcf file and it's "encrypted" password, this is indeed an easy thing to do:

Will get you what you need. I only do this to highlight the fact that you should NOT be using pcf files for VPN access.

share|improve this answer
Hi, yes I tried that one without any luck. I get an 'wrong password responce' – rtacconi Nov 2 '10 at 8:44

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.