I'm totally confused by this Cisco password format:

enable password level 15 encrypted 382fda4a4a26e6637edac0eb8b8ba4581087d32d

Overall string is 40 bytes long:

$ echo -n 382fda4a4a26e6637edac0eb8b8ba4581087d32d | wc -c

Example of config with this password format can be seen e.g. here.

No special characters except for [a-z0-9]. It does not fall under any of Type X Cisco password taxonomy (Types 0,4,5,7,8,9). Hashcat does not include any available cracking mode for it.

What kind of voodoo is that? Is it secure? Should I be worried that original password string may be recovered?

P.S. There's suspicion that this is not hash, but encryption. This resource states that:

(use) password that is already encrypted from another configuration file of another device. This will allow you to configure the two switches with the same password.

In case if this is encryption, how new device can decrypt it then?

  • 1
    It's encrypted, not hashed in that format? – schroeder Oct 14 '20 at 19:52
  • Any hints what algorithm and where master key is stored? According to some information in web this format can be used to transform credentials across device configs. How other device knows master key in order to decrypt then? – dtrizna Oct 15 '20 at 6:50
  • 1
    That's a brand new question and not about security but about Cisco IOS. – schroeder Oct 15 '20 at 6:54
  • 1
    What version of Cisco IOS (or other OS) is this from? Can you add the output of show version to your question? – Jeff Wheeler Oct 15 '20 at 13:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.