Windows CardSpace - decrypting InfoCard private data

Ultimate solution for lost and forgotten passwords

News

September 5, 2008
Passcape Dictionaries Collection has been announced.

June 20, 2008
Mozilla Password Recovery with Firefox 3 support.

June 03, 2008
Outlook Password Recovery was updated up to v2.2.7.

MORE

	Site map
	View the whole Web site map for quick navigation through the pages.

	Contacts
	You are welcome to send your comments, questions and suggestions regarding our site or products.

Windows CardSpace - decrypted private data

	Quick links
- Selecting CardSpace data source - Reading system credentials - Decrypting system's Master Key - Decrypting user's Master Key - Decrypting InfoCard public data - Decrypting InfoCard PIN - Selecting recovery method - Setting attack options - Launching selected attack > Decrypting InfoCard private data
	NPRW main page

Decrypted private data

The application Wizard's final dialog with decrypted claims looks like the figure below.

Decrypted InfoCard data

Personal Information Card, as it has been stated above, contains a permanent set of personal data. Below is the list of all claims available in Personal Information Card along with their Uniform Resource Identifiers.

Claim/URI/Description

First Name
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname
This attribute is used to hold the part of a person's name which is not their surname nor middle name

Last Name
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname
Surname attribute which contains the family name of a person.

Email Address
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress
Electronic mailbox attribute following the syntax specified in RFC 822.

Street Address
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddress
Physical address of the object to which the entry corresponds, such as an address for package delivery.

Locality Name or City
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/locality
Name of a locality, such as a city, county or other geographic region.

State or Province http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince
The full name of a state or province. The values should be coordinated on a national level and if well-known shortcuts exist - like the two-letter state abbreviations in the US - these abbreviations are preferred over longer full names.

Postal Code
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/postalcode
The postal code attribute type specifies the postal code of the named object. If this attribute value is present, it will be part of the object's postal address - zip code in USA, postal code for other countries.

Country
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country
Contains a two-letter ISO 3166 country code.

Primary or Home Telephone Number
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/homephone
Specifies a home telephone number associated with a person.

Secondary or Work Telephone Number
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/otherphone
Office/campus telephone number associated with a person.

Mobile Telephone Number
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone
Mobile telephone number associated with a person.

Date of Birth
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dateofbirth
The date of birth of a subject in a form allowed by the date data type.

Gender
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/gender
Gender of a subject that can have any of these exact string values: 0 - meaning unspecified, 1 - meaning Male or 2 - meaning Female. Using these values allows them to be language neutral.

Web Page
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/webpage
Web page of a subject expressed as a URL.

Private Personal Identifier
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
Private personal identifier (PPID) identifies the subject to a relying party. Typically, the PPID should be generated by an identity provider as a pair-wise pseudonym for a subject for a given relying party. For a self-issued information card, the self-issued identity provider in an identity selector system should generate a PPID for each relying party as a function of the card identifier and the relying party's identity.

back to top