Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 17 Jun 2011 18:16:43 +0200
From: magnum <rawsmooth@...dband.net>
To: john-dev@...ts.openwall.com
Subject: Re: Either issues with latest patches of mscash and mscash-utf8,
 or incompatibility of the test suite v1.0.1 with these, or something else?

On 2011-06-17 16:21, Robert B. Harris wrote:
> I applied the following patches to in the following order:
> john-1.7.7-jumbo-6.diff
> john-1.7.7-jumbo-6-mscash-oracle-fixes.diff
> john-1.7.7-jumbo-6-more-mscash-fixes.diff
> john-1.7.7-jumbo-6-auto_have_sha256-03.diff
> john-1.7.7-jumbo-6-zip-0.diff
> john-test-suite_1.0.0.diff
> john-test-suite_upgrade_1.0.0-to-1.0.1.diff
> I ran the tstall test suite v1.0.1 script, and for mscash and 
> mscash-utf8, I don't get the expected 1320 guesses.
> I instead get:
> -form=mscash                    guesses: 24 time: 0:00:00:00 DONE
> -form=mscash-utf8               guesses: 23 time: 0:00:00:00 DONE
> So, I assume there is an issue with either of the patches 
> "john-1.7.7-jumbo-6-mscash-oracle-fixes.diff"  or 
> "john-1.7.7-jumbo-6-more-mscash-fixes.diff", or an issue with the test 
> suit v1.0.1, or an incompatibility of the test suite with the above 
> patches.   Which one? or something else?
>

Sorry, I should have mentioned that on the wiki. The mscash infiles 
included in test suite 1.0.1 are not correct! They were produced without 
lowercasing the salt (and the format did not lowercase, like it should, 
until now). There will be an update to the test suite sooner or later, 
with enhancements and new formats (and this bug fixed - we were (half) 
joking about the need for a test suite for the test suite).

So your build is probably fine except for the mscash2 issue I posted 
about a couple of days ago: it doesn't handle salt length >8 properly.

magnum

Content of type "text/html" skipped

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ