john-dev - 'pass_gen.pl hdaa' generate invalid hashes

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Wed, 19 Aug 2015 17:11:09 +0800
From: Kai Zhao <loverszhao@...il.com>
To: john-dev@...ts.openwall.com
Subject: 'pass_gen.pl hdaa' generate invalid hashes

Hi,

The pass_gen.pl generate invalid hashes for hdaa when I input
'123', '', '456', '123456789'.

$ ../pass_gen.pl hdaa

Enter words to hash, one per line.

  ** Here are the hashes for format hdaa **

u0:$response$6fa99496049f922efc09bfab571c3032$u1$Johnson$GET$/5Nzr4kzXohYf1huS9dUjpEqJXwjRC1fs3JnedRrTVnzT7sIWvDSTS6V$589ec$00000001$02ff93dd4e050970e726eebcb64$auth:0:0::
123
u1:$response$06da61b95b01fd7d2c250546cc86556c$addams$barney$GET$/QoWP77ybXjws3NovoMVkqqRLW8$9de2883248090b73c4b$00000001$4d93e120849ce680157ae807a$auth:1:0:123:
456
u2:$response$2e220175fcdc5d9127b812689b7bb0b9$jack$John$GET$/Ek$040cecc6d9ea4$00000001$3e8b66b$auth:2:0:456:
123456789
u3:$response$748f64510e5600819a4658604691f4fe$John$barney$GET$/rRw0Xpcj29luRTshg31xrwNVPg7aZhbkt9MupiZGc1ORrW0k$4652872a3aacbe9f$00000001$ef26b648ddd78c423811b75c94a2a95$auth:3:0:123456789:

Copy the hashes to pwfile

$ cat pwfile
$response$6fa99496049f922efc09bfab571c3032$u1$Johnson$GET$/5Nzr4kzXohYf1huS9dUjpEqJXwjRC1fs3JnedRrTVnzT7sIWvDSTS6V$589ec$00000001$02ff93dd4e050970e726eebcb64$auth
$response$06da61b95b01fd7d2c250546cc86556c$addams$barney$GET$/QoWP77ybXjws3NovoMVkqqRLW8$9de2883248090b73c4b$00000001$4d93e120849ce680157ae807a$auth
$response$2e220175fcdc5d9127b812689b7bb0b9$jack$John$GET$/Ek$040cecc6d9ea4$00000001$3e8b66b$auth
$response$748f64510e5600819a4658604691f4fe$John$barney$GET$/rRw0Xpcj29luRTshg31xrwNVPg7aZhbkt9MupiZGc1ORrW0k$4652872a3aacbe9f$00000001$ef26b648ddd78c423811b75c94a2a95$auth

$ ../john pwfile --format=hdaa
Using default input encoding: UTF-8
No password hashes loaded (see FAQ)


Does the hdaa not allow numbers for passwords ? Or there is bug in pass_gen.pl ?


Thanks,

Kai

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.