john-users - Re: Oracle password cracker

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 31 Aug 2005 09:19:56 +0200
From: Simon Marechal <simon@...quise.net>
To: john-users@...ts.openwall.com
Subject: Re: Oracle password cracker

Solar Designer wrote:
> Where does des.h come from, if it's not a dependency on an external
> library?  Does this oracle_fmt.c depend on another patch of yours?  If
> so, can you perhaps post an URL to a complete patch that would be
> suitable for inclusion in contrib?

It's a copy'n'paste of openssl code. A complete tarball of my working 
version of john can be located at :

http://virtual2.bandecon.com/misc/myjohn.tgz

It's full of stuff (mmx/sse versions of raw-md5, raw-sha1, nthash), some 
of them are not that well tested (is it cross platform?), or just do not 
work yet (wpa).
I do not believe i'll write a patch because most of the stuff here is 
messy, include many changes, and i proved several times my unability to 
produce a clean patch, suitable to contrib.
This is just a useful POC, i'll leave the job of writing the "official" 
oracle cracker to someone that is good at coding.