john-dev - Re: auditing our use of FMT

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 15 Aug 2015 21:18:21 +0800
From: Kai Zhao <loverszhao@...il.com>
To: john-dev@...ts.openwall.com
Subject: Re: auditing our use of FMT_* flags

On Tue, Jul 28, 2015 at 2:30 AM, magnum <john.magnum@...hmail.com> wrote:
> On 2015-07-27 15:57, Kai Zhao wrote:
>>>
>>> $ ./john --test=0 --format=dominosec8
>>> Will run 8 OpenMP threads
>>> Testing: dominosec8, Lotus Notes/Domino 8 [8/64]... (8xOMP)
>>> FAILED (cmp_all(1))
>>>
>>> I did the same thing to those formats which do not set FMT_8_BIT
>>> and they are ok. Such as, descrypt, bsdicrypt, tripcode
>>>
>>
>> Could you help me with the FMT_8_BIT ? Do I understand right ?
>> Thanks very much.
>
>
> I'm not sure about this but this problem seems to be similar to FMT_CASE
> (just a self-test-technical issue). So just like for FMT_CASE you should try
> testing with some input file and a wordlist instead.
>

The dominosec8 seems to should set FMT_8_BIT. Below is the test steps:

1. The test vectors of dominosec8

static struct fmt_tests tests[] = {
        {"(HsjFebq0Kh9kH7aAZYc7kY30mC30mC3KmC30mCluagXrvWKj1)", "hashcat"},
        {"(HosOQowHtnaYQqFo/XlScup0mC30mC3KmC30mCeACAxpjQN2u)",
"pleaseletmein"},
        {NULL}
};

2. cat pwfile

(HsjFebq0Kh9kH7aAZYc7kY30mC30mC3KmC30mCluagXrvWKj1)

3. cat password.lst

hashcat

4. rm -f ../john.pot && ../john pwfile  --skip-self-test --wordlist=password.lst

Using default input encoding: UTF-8
Loaded 1 password hash (dominosec8, Lotus Notes/Domino 8 [8/64])
Will run 8 OpenMP threads
Press 'q' or Ctrl-C to abort, almost any other key for status
hashcat          (?)
1g 0:00:00:00 DONE (2015-08-15 21:11) 100.0g/s 100.0p/s 100.0c/s
100.0C/s hashcat
Use the "--show" option to display all of the cracked passwords reliably
Session completed

5. Change the password.lst

$ echo -e 'hashca\xF4' > password.lst

6. rm -f ../john.pot && ../john pwfile  --skip-self-test --wordlist=password.lst

Using default input encoding: UTF-8
Loaded 1 password hash (dominosec8, Lotus Notes/Domino 8 [8/64])
Will run 8 OpenMP threads
Press 'q' or Ctrl-C to abort, almost any other key for status
0g 0:00:00:00 DONE (2015-08-15 21:17) 0g/s 100.0p/s 100.0c/s 100.0C/s hashca�
Session completed

When I change "hashcat" -> "hashca\xF4", john failed to crack the password. So I
think the dominosec8 should set FMT_8_BIT.


Thanks,

Kai

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.