Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 22 Mar 2013 15:55:55 +0000 (GMT)
From: Costin Enache <e_costin@...oo.com>
To: "john-dev@...ts.openwall.com" <john-dev@...ts.openwall.com>
Subject: sunmd5 round count fixed to 500? [patch]

I've just noticed that the sunmd5 (sunmd5_fmt_plug.c) plugin has the rounds=904 hard coded, and won't load hashes with rounds=0 (so just 4096) or with other number of rounds. Guess it was somehow forgotten like that ... the fantastic "patch" below allows hashes like the following ones to be processed just fine:

$md5,rounds=1000$cd/IPUR.$$cK9VFbjyCVafobmZ11.qD1
$md5,rounds=904$ZVM0Ra/u$$5Shz0OCYcP2SSj4ltgYn./
$md5$6GiSSeL0$$F6rRJpg4Ee2hPN9kSFkoN0
$md5$eY5jk40I$$j3T35bMT4Alrk8rMCFBmE.

Cheers,
Costin




--- sunmd5_fmt_plug.c.orig      2013-03-22 16:47:41.000000000 +0100
+++ sunmd5_fmt_plug.c   2013-03-22 16:43:45.000000000 +0100
@@ -89,8 +89,8 @@
 #define BENCHMARK_LENGTH               -1
 
 // There 'ARE' more types, but we only handle these 2, at this time.
-#define MAGIC  "$md5,rounds=904$"
-#define MAGIC2 "$md5$rounds=904$"
+#define MAGIC  "$md5,"
+#define MAGIC2 "$md5$"
 
 /* THIS one IS a depricated sun string, but for real:  $md5$3UqYqndY$$6P.aaWOoucxxq.l00SS9k0: Sun MD5 "password"  */
 /* $md5,rounds=5000$GUBv0xjJ$$mSwgIswdjlTY0YxV7HBVm0   passwd  This one was the python code from http://packages.python.org/passlib/lib/passlib.hash.sun_md5_crypt.html, but the rounds are busted. */
[ CONTENT OF TYPE text/html SKIPPED ]

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ