Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 20 Mar 2012 11:48:23 +0100
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: raw-MD5 bug (john.pot loading) in latest git

On 03/20/2012 11:16 AM, Raphaƫl Rigo wrote:
> Hello,
> there's a bug with raw-MD5 and john.pot in latest git :
> 
> $ cat coin
> test:098f6bcd4621d373cade4e832627b4f6
> 
> $ cat testpot
> 098f6bcd4621d373cade4e832627b4f6:test
> 
> $ ./john --pot=/tmp/testpot --format=raw-md5 /tmp/coin
> Loaded 1 password hash (Raw MD5 [SSE2i 12x])
> No password hashes left to crack (see FAQ)
> 
> $ ./john --pot=/tmp/testpot --format=raw-md5 --show /tmp/coin
> 0 password hashes cracked, 1 left
> 
> if testpot is empty, john fills it with :
> $dynamic_0$098f6bcd4621d373cade4e832627b4f6:test
> 
> so it seems there's bug with pot loading. it is also buggy with
> "generic" target.

This might be a bug, and it's a problem if you have old (pre
1.7.8-jumbo8 or so) untagged entries in the pot file.

Does it work in Jumbo-5? Or 1.7.8-jumbo-8? Please try both raw-md5 and
dynamic_0 (and raw-md5thick if available).

If not, it might have "happened" here:
http://www.openwall.com/lists/john-dev/2011/10/24/10 but it was supposed
to read bare (old) hashes from the pot file, but always store new ones
with tags.

Note that in latest git, "raw-md5" is a thick one, not a dynamic. That
might be a separate version of the "same" bug (but from a quick test it
seems dynamic is affected too).

magnum

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ