Type 9 secret

[surazb]

Is there any way that we can decrypt type 9 secret on Cisco Switch to get Palin text Password

[marce1000]

      - FYI : https://www.infosecmatter.com/cisco-password-cracking-and-decrypting-guide/

   M.

[Jens Albrecht]

Hello @surazb,

no, this is not possible.

Type 9 does not use an encryption algorithm but uses the SCRYPT hashing algorithm to secure the password.
Hashing algorithms are not reversible by design so that there is no way to restore the original plain text password.

For details you can take a look at this article:

Understanding the differences between the Cisco password \ secret Types

HTH!

[Kasun Bandara]

@surazb hi, this is not possible. type 7 is decryptable. if you need to get clear text for type 9, you may try brute force decryption tools or rainbow tables.

[Joseph W. Doherty]

As @Jens Albrecht correctly notes, as a type secret 9 is hashed, and a hash isn't encrypted, it cannot be decrypted.

Regarding obtaining a password to create the same hash, in theory, yes.  An effective password might be obtained but it may not be the original password.

In practice, likely no, at least on existing hardware and algorithms, due to the amount of time it would take.  (NSA might know otherwise, but they're not talking.)