Question

My application uses MS access database to save some sensitive information. Though that information itself is protected, I need to convince a client that there is an another wall of database encryption with strong password that has to be broken first.

Do you know which encryption algorithm/method is used for encrypting access database?

Answer 1

For Access 2003 there are some options regarding encryption. Some of the possible encryption types you might find in the Encryption Type dialog are:

• Weak Encryption (XOR)
  Not recommended, provided for legacy files only
• Office 97/2000 Compatible
  Not recommended, provided for legacy files only
• RC4, Microsoft Base Cryptographic Provider v1.0
• RC4, Microsoft Base DSS and Diffie-Hellman Cryptographic Provider
• RC4, Microsoft DH SChannel Cryptographic Provider
• RC4, Microsoft Enhanced Cryptographic Provider v1.0
• RC4, Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider
• RC4, Microsoft Enhanced RSA and AES Cryptographic Provider (Prototype)
• RC4, Microsoft RSA SChannel Cryptographic Provider
• RC4, Microsoft Strong Cryptographic Provider

Source: Important Aspects of Password and Encryption Protection

---

If you are using Access 2007, here is a good article, which you could use as reference:

Encrypting an Access Database

What type of encryption does Access 2007 use?

Access 2007 uses the Microsoft
Cryptographic API. This means that it
will support any cryptographic
algorithm available within Windows as
a Cryptographic Service Provider
(CSP). This is a great improvement
over earlier versions of Access, which
only supported a built-in, weak
encryption algorithm.