Allez faire un tour dans la section Security Considerations. Il y a quelques paragraphes qui méritent d'être lus:
4.1 Strength of encoded PST data blocks
This protocol uses two keyless cipher algorithms to encode the data blocks in the PST. These algorithms only provide data obfuscation and can be conveniently decoded once the exact encoding algorithm is understood.
Moreover, only end-user data blocks are encoded in the PST. All the other infrastructure information, including the header, allocation metadata pages and BTree pages are stored without obfuscation.
In summary, the strength of the encoded PST data blocks provides no additional security beyond data obfuscation.
4.2 Strength of PST Password
The PST Password, which is stored as a property value in the Message store, is a superficial mechanism that requires the client implementation to enforce the stored password. Because the password itself is not used as a key to the encoding and decoding cipher algorithms, it does not provide any security benefit to preventing the PST data to be read by unauthorized parties.
Moreover, the password is stored as a CRC-32 hash of the original password string, which is prone to collisions and is relatively weak against a brute-force approach.
On voit le niveau de sécurité apporté par les options de chiffrement proposées pour l'export des données...
# Chiffrement des .PST
Posté par rahan . En réponse au journal Microsoft publie les specifications des fichiers PST d'Outlook. Évalué à 8.
4.1 Strength of encoded PST data blocks
This protocol uses two keyless cipher algorithms to encode the data blocks in the PST. These algorithms only provide data obfuscation and can be conveniently decoded once the exact encoding algorithm is understood.
Moreover, only end-user data blocks are encoded in the PST. All the other infrastructure information, including the header, allocation metadata pages and BTree pages are stored without obfuscation.
In summary, the strength of the encoded PST data blocks provides no additional security beyond data obfuscation.
4.2 Strength of PST Password
The PST Password, which is stored as a property value in the Message store, is a superficial mechanism that requires the client implementation to enforce the stored password. Because the password itself is not used as a key to the encoding and decoding cipher algorithms, it does not provide any security benefit to preventing the PST data to be read by unauthorized parties.
Moreover, the password is stored as a CRC-32 hash of the original password string, which is prone to collisions and is relatively weak against a brute-force approach.
On voit le niveau de sécurité apporté par les options de chiffrement proposées pour l'export des données...