RAR Password in 5 -15 minutes? Do you believe that?

Originally Posted by Janus68

This can be true in the case of very small archives <...> -
just after decompression a whole archive you can see, if you use right password

Really? I don't think so.
File is being encrypted after it's compressed!
So when you are trying to decompress encrypted archive the sequence is smth like this:

1). Decrypt file/block with given password (or hash of password, or hash(hash(password)), etc);
2). Calculate hash of decrypted file/block; // I think WinRAR uses for this only few bytes from the beginning of the archive, may be one block
3). Compare with valid hash (that valid hash is calculated when file is being archived/encrypted);
4). If bad hash - "Wrong password!";
5). Else - decrypt other blocks and decompress decrypted file.

There is NO need to decompress or decrypt the WHOLE file to check if password is valid. One block is enough.
So there is no difference what is being bruteforced - tiny or huge archive.

BTW if you try to encrypt file before compressing it, that encrypted file will have very "bad" entropy and file compression ratio will be ~0% [ (decompressed_size - compressed_size) / decompressed_size ]

@Sten
Yes, this method really works! RSA-8192 or true AES-256 in few minutes