Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 31 Jan 2013 07:45:41 +0100
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: NetNTLMv1

On 31 Jan, 2013, at 7:34 , Solar Designer <solar@...nwall.com> wrote:
> On Thu, Jan 31, 2013 at 09:54:06AM +0400, Solar Designer wrote:
>> I have a quick and dirty implementation, storing the entire 512 KB table
>> per salt.  (This can be lowered by storing partial DES blocks - still
>> sufficient to reject most password candidates.)
>> 
>> I'll post benchmarks and patch shortly.
> 
> I've attached the patch (made against bleeding-jumbo).  This does show
> good speed improvement, although in absolute terms the speeds are still
> a lot lower than hashcat's since we're using non-SIMD implementation of
> NTLM here.  We ought to switch to using our optimized NTLM also as part
> of NetNTLMv1.  (Need to review other related formats for this as well.)

> New, one core in FX-8120:
> 
> Benchmarking: NTLMv1 C/R MD4 DES (ESS MD5) [32/64]... DONE
> Many salts:     86834K c/s real, 86834K c/s virtual
> Only one salt:  7278K c/s real, 7278K c/s virtual
> 
> Benchmarking: NTLMv1 C/R MD4 DES (ESS MD5) [32/64]... DONE
> Many salts:     163481K c/s real, 163481K c/s virtual
> Only one salt:  7471K c/s real, 7471K c/s virtual
> 
> (yes, the "many salts" speed varies a lot)
> 
> New, full FX-8120:
> 
> Benchmarking: NTLMv1 C/R MD4 DES (ESS MD5) [32/64]... (8xOMP) DONE
> Many salts:     149438K c/s real, 47591K c/s virtual
> Only one salt:  11780K c/s real, 1476K c/s virtual
> 
> (Poor OpenMP scalability here.  We could probably correct that.)
> 
> This is proof-of-concept, although we can/should commit it already for
> some nice improvement over what we had before.  We should also proceed
> to optimize this code for real, starting by making use of our
> SIMD-enabled NTLM code for this format as well.  Anyone?
> 
> Alexander
> <john-NETNTLM-table.diff>

Cool. I haven't looked much at this for years. I'll test and commit. We should be able to use the md4 intrinsics.

magnum

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ