Write protected Word-File

Hello,

I've got a write-protected Word-File. I know how to remove the protection, but is it possible to find out the password? All the howto's are for read-protected files and the office2john.py doesn`t find a hash.

When I convert the document to an xml-file I got the following:

<w:documentProtection w:edit="forms" w:enforcement="1" w:cryptProviderType="rsaAES" w:cryptAlgorithmClass="hash" w:cryptAlgorithmType="typeAny" w:cryptAlgorithmSid="14" w:cryptSpinCount="100000" w:hash="herecomesthehash" walt="herecomesthesalt"/>

So is there a way to get the password from the has an the salt? In the hash-type-list there is no rsaAES.