Question

Win 10 AES decrypt text

Feb 12, 2020 11:46AM PST

I found the .xml file that contains the saved WiFi password on a Windows 10 surface pro. The file is not encrypted but the password is.... Is there a way to decrypt this text to get the password?

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

I can't figure out a way to decrypt it. I think I may be hex, AES, wpa2psk If those mean anything. Thank you so much for the help

Discussion is locked

Answer
Follow
Reply to: Win 10 AES decrypt text
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: Win 10 AES decrypt text
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Comments
- Collapse -
Answer
Re: WiFi-password
Feb 12, 2020 11:51AM PST

There isn't a single WiFi-password, I think. There is one for each WiFi-router you ever accessed and didn't delete. So I wonder what you mean with "the saved WiFi-password".

One of the basic ideas of encryption is that the key is secret. So only Microsoft can answer your question. Nobody else can.

By the way, hex isn't an code. It's a way to write integer numbers, just like decimal or binary are. Decimal 10 = binary 1010 = hex A = octal 12.
AES and WPA are ways (protocols) to encode a WiFi-signal. I don't think Windows uses it internally.

Post was last edited on February 12, 2020 12:05 PM PST

- Collapse -
Single connection
Feb 12, 2020 12:02PM PST

I believe it's a single password as there's a .xml file for each network I've connected to. I'd rather not share the whole file but if necessary I can.

- Collapse -
Re: single connection
Feb 12, 2020 12:12PM PST

Since you were talking about "the file", I assumed there was one. But it seems you should have written "the files" in plural. Then indeed it probably contains information about one specific connection.

If you can tell the full path of such a file (starts with c: and ends with .xml) I can have a look at mine. No need to publish the content of yours. Although it wouldn't harm either, since nobody can decypher it.

- Collapse -
File
Feb 12, 2020 12:33PM PST

I guess there's no harm. Here's the full file contents for the password I am trying to retrieve

<?xml version="1.0"?>
<WLANProfile xmlns="http://www.microsoft.com/networking/WLAN/profile/v1">
<name>LHWL</name>
<SSIDConfig>
<SSID>
<hex>4C48574C</hex>
<name>LHWL</name>
</SSID>
</SSIDConfig>
<connectionType>ESS</connectionType>
<connectionMode>manual</connectionMode>
<MSM>
<security>
<authEncryption>
<authentication>WPA2PSK</authentication>
<encryption>AES</encryption>
<useOneX>false</useOneX>
</authEncryption>
<sharedKey>
<keyType>passPhrase</keyType>
<protected>true</protected>
<keyMaterial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keyMaterial>
</sharedKey>
</security>
</MSM>
<MacRandomization xmlns="http://www.microsoft.com/networking/WLAN/profile/v3">
<enableRandomization>false</enableRandomization>
</MacRandomization>
</WLANProfile>

- Collapse -
Re: retrieve password
Feb 12, 2020 2:55PM PST

I'm afraid you'll have to pay Microsoft to do this. They might do it if you can prove you're the owner of the router that's called LHWL by taking both the router and your laptop with this file on it with you to their lab.

But it's free to reset your router and change the password to something else, so you can use it again. And if that isn't possible, it's much cheaper to buy another router.
And it surely illegal to crack the password of a router you don't own.

CNET Forums

Forum Info