[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 17 Aug 2012 08:16:36 -0400 (EDT)
From: jfoug@....net
To: john-dev@...ts.openwall.com
Subject: Was: Re: [john-users] Cracking Gauss using dynamic
Dev talk, brought to john-dev. I will make a non-dev follow up on
john-users.
On Fri, Aug 17, 2012 at 12:40 AM, Solar Designer wrote:
> On Thu, Aug 16, 2012 at 11:06:48AM -0400, Matt Weir wrote:
> I thought that maybe the implementation of phpass in the dynamic
> format was generic enough - but it is not. Its loop is hardcoded in
> DynamicFunc__PHPassCrypt(). So it seems like the current dynamic
> format
> is incapable of arbitrary loops. This may be something for JimF to
> enhance - not for this specific target, but in general.
This has been on my 'to figure out' list for several years. I would
like to add looping, variables, condtional etc. But I just have not
gotten down to doing this of yet. Currently, dynamic is just an array
of function pointers, that is run 1 after the other. These function
pointers all have exactly the same prototype: void fp(void). Then there
are a few input (working) buffers, length pointers, a matching set of
output (crypt) buffers, some 'CONST' buffers, a salt, a salt2, a
username, and generic 'fields' buffers (fields from the input file).
That is really all there is to dynamic now. Seems overly simplified,
but it has allowed most of what we do for cracking hashes to be able to
be done.
The biggest shortcomings, are:
strange input handling, like byte transposing for the 'crypt'
md5/sha/sun/..., partial byte usage (like PIX), etc. These are all
one-off coded.
lack of simple looping (phpass, crypt* formats)
lack of variables
lack of dynamic parsing of variables (sunmd5, php/wordpress, or other
variable round crypts)
lack of conditionals (likely fits in with variables).
lack of a hooking function mechanism (to add 'custom' code). This would
be needed/usable for things like the coin flip in sunmd5, possibly for
handling strange inputs, etc. Probably adding specialized hooks for
pre-init, (post-init also??) and post-crypt would be helpful.
I have thought of things in the past, such as pre-processing (like macro
expansion in C). This would by things like looping. It would allow for
'constant' pre-defined variables (like building phpass that does 2048
loops). This would be on the easier side of implenting. It would only
require changes in the code that loads the array of function pointers.
The full 'enhancement' would be a very large undertaking, on an already
overly complex format.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
