Question

I’ve written an encryption program that encrypts and decrypts selected files using a user-entered password as the encryption key.

Once en/decrypted, the user will be asked if they want to delete the file that was used, and, in the case of decryption, open the newly decrypted file.

My brother came up with an idea for this application yesterday that might save me a lot of grief should I forget a password.
He suggested I set a “Master” password that I can enter to decrypt any file that was encrypted with this application. Something simple so it’s easy to remember in case I forget a password I used to encrypt the file in the first place.

Based on the fact that the password serves as the encryption key, can it be done? If so, how?

The code sample I used (and have since modified for greater functionality) was found here:
http://www.codeproject.com/KB/security/EncryptFile.aspx

Thanks in advance!

Answer 1

No, if you want a “master password”, then you’ll have to make the encryption key something standard, then secure access to the key with a password. If the key is based on the password, then there’s no overriding it.