Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 29 Jun 2012 00:28:44 +0200
From: Frank Dittrich <frank_dittrich@...mail.com>
To: john-dev@...ts.openwall.com
Subject: Re: Shouldn't the TS work with a pw.dic in reversed order
 as well?

On 06/29/2012 12:17 AM, magnum wrote:
> On 2012-06-29 00:10, Frank Dittrich wrote:
>>  form=dynamic_2                    guesses: 1482 time: 0:00:00:00 :
>> Expected count(s) (1500)  [!!!FAILED!!!]
>> Exiting on error.  The pot file ./tst.pot contains the found data
>> The command used to run this test was:
>>
>> ../run/john -ses=./tst -nolog -pot=./tst.pot dynamic_2_tst.in
>> --wordlist=pw.dic 2>&1 >/dev/null
>>
>>
>> Other formats that fail:
> 
> Interesting find. I used to do "shuf pw.dic.orig > pw.dic" for similar
> adventures.
> 
> 
>> form=dynamic_2-raw                guesses: 1482 time: 0:00:00:00 :
>> Expected count(s) (1500)  [!!!FAILED!!!]
>> .pot CHK:dynamic_2-raw            guesses: 1482 time: 0:00:00:00  [PASSED]

[...]

> It's very consistent :)

Yes.

>> form=hmac-sha1                    guesses:  730 time: 0:00:00:09 :
>> Expected count(s) (1500)  [!!!FAILED!!!]
>> .pot CHK:hmac-sha1                guesses:  730 time: 0:00:00:01  [PASSED]
>>
>> So,. for hmac-sha1 at least the password count is the same if we reverse
>> the order of candidates tried.
> 
> You did not pull the fix Jim authored? This problem should be long gone.

I did pull, but fortunately I didn't rebuild john.
Otherwise I wouldn't have stumbled over the other cases.

Will repeat the test after make clean..., and with other .dic files
reversed as well.

Frank

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.