Outlook Password Protection for Personal Folders (PST) is weak, very weak
Password protection on PST files should not be relied upon for security. Outlook uses a CRC32 algorithm rather than a cryptographic hash like MD5 or SHA-1, which makes it trivially bypassable. Applies to Outlook 97–2003 (ANSI format PST files). Outlook 2007 and later use the Unicode PST format, though PST password protection remains weak and should not be considered a…
Read More »