Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 5 Apr 2012 20:08:37 +0530
From: Dhiru Kholia <>
Subject: ssh format testing


For testing ssh format, I generated 3100+ private keys using
password.lst for input passphrases. This testing revealed a bug in
ssh2john program (missing call to BIO_free function). An OMP build of
JtR could successfully crack all the private keys (no bugs!). I have
uploaded the key collection to the wiki.

We should do this exercise for the all (?) formats for bug-hunting and
verifying correctness.


Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ