Microsoft Word Document Unprotect Program

-----------------------------------------

Word has a fairly simpleminded encryption facility you can use

to protect your documents from prying eyes. Unfortunately,
three seconds with the hex dump of a "protected" file will
tell you how it's done, and how to undo it without knowing the
passphrase.

In any case, I went to work building wu.exe because I had

forgotten a passphrase I used to protect an important document
I quickly discovered that Word's protection was useless, got
my document back, and started using better encryption.

I still don't know what the passphrase was that I used on my

document, because wu.exe doesn't need to know it. It just
builds a new file with the encryption removed. I decided to
publish this mainly to make the point that it is probably a
very bad idea to depend on Word to protect confidential
information.

There are two versions in this packet; one for Windows and one
for DOS. Copy the one you want to use to wu.exe in some
directory on your path.

winwu.exe is a Windows App, so you can only run it

from Windows.

doswu.exe is a DOS app which will run from DOS or

Windows.

WU.EXE WILL NOT CHANGE YOUR DOCUMENT. It will

only create a new one with the name you specify.

When you want to unprotect a document whose passphrase you

have forgotten (or convince somebody that they should get
better security), use the [File,Run] menu item in Program
Manager or File Manager and enter the line

wu infile outfile

replacing infile and outfile with the names of the file you
want unprotected and of the resulting unprotected file. If
everything goes well, the output file will simply appear in
the current directory, or where you specified if you included
a path in the file name. If something went wrong, you'll get a
message in a window that stays open until you close it. Sorry,
no fancy dialog boxes; the program is really expecting to be
launched by a command-line interpreter (I use and recommend
Eschalon's WinCLI Pro).

The encryption/decryption technical details are contained in

the comments to the source code file.

The source code was compiled with Turbo C++ for Windows and
Zortech C++ for DOS, but I've tried to keep it generic. It
should compile under any C++ compiler with few if any changes.
 NOTE:
I haven't tested this on a huge number of Word documents; just
a bunch created with Word for Windows Versions 1 and 2. There
may be some version or versions that use the part of the
header record that wu.exe expects to find all zero. If this
happens, wu.exe will just refuse to function (with an
appropriate message). I would appreciate a note from anyone
who discovers such a situation or any other that interferes
with decryption. The technique used is very simple and there
is more technique that can be applied if this doesn't work in
every case.

COPYRIGHT, etc:
This work is released into the Public Domain and may be freely
used, distributed and copied. I would appreciate attribution
when it is appropriate. It is released with all the usual
disclaimers; in short, you are solely responsible for anything
you do to yourself or anybody else with this program. If
that's a problem you should erase it immediately.

Authentication:
The file doswu.sig contains a PGP Version 2 digital signature for
doswu.exe. My key is published on the end of just about every
message I put on a BBS or UseNet. You can't right off trust
the key at the end of this file to authenticate doswu.exe, but
you can use it to send me a message. If I can read the
message, either you've got a trustworthy key or we are in deep
doodoo with some very powerful people. If you live in the USA
or France, where using PGP may be illegal, I can only
sympathise. In any case, you can always recompile the source
if you have any concern about the executable.

HELLO MICROSOFT:
If any of you are listening; it would be very nice if future
versions of Winword had competent encryption that can't be
broken by any kid who understands his Spiderman Secret Decoder
Ring. A false sense of security is much worse than none at
all. It misleads people into thinking that they have assured
the confidentiality of their documents when they have in fact
not, and should have used another method to do so. The best
approach is to have winword call an external program to do the
encryption. This would let us plug in our favourite
cryptengine and save you a lot of hassle vis-a-vis export
controls on useful crypto technology.

---
Marc Thibault | Automation Architect | All we are saying
marc@tanda.isis.org | R.R.1, Oxford Mills, | is give global
CIS:71441,2226 | Ontario, Canada K0G 1S0 | warming a chance.
NC FreeNet: aa185 | |

-----BEGIN PGP PUBLIC KEY BLOCK-----

Version: 2.0

mQBNAiqxYTkAAAECALfeHYp0yC80s1ScFvJSpj5eSCAO+hihtneFrrn+vuEcSavh
AAUwpIUGyV2N8n+lFTPnnLc42Ms+c8PJUPYKVI8ABRG0I01hcmMgVGhpYmF1bHQg
PG1hcmNAdGFuZGEuaXNpcy5vcmc+
=HLnv
-----END PGP PUBLIC KEY BLOCK-----