[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 19 Jul 2006 18:14:03 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Unable to crack passwords
On Wed, Jul 19, 2006 at 07:11:14PM +0530, V, Bharath (Bharath) wrote:
> I am using Blow Fish algorithm to encrypt the password and Password is
> "hello"
This doesn't make sense - or it might not be a complete description of
what you're doing.
Blowfish is a block cipher. It encrypts data with a key, allowing for
quick decryption given the key. In your case, is "hello" the data to
encrypt (with what key?) or the key you're encrypting some other data
with (what data?), or is it both the data and the key?
What are you doing this for?
Most likely, Blowfish - or any other fast cipher, for that matter - is
not appropriate for your task. Instead, you might need to use a
higher-level algorithm specifically intended for password hashing.
The Blowfish-based password hashing method (known as bcrypt) that JtR
supports has very different properties from Blowfish itself. You can
find a description of this hashing method in the paper linked from:
http://www.openwall.com/crypt/
--
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598 fp: 6429 0D7E F130 C13E C929 6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments
Was I helpful? Please give your feedback here: http://rate.affero.net/solar
--
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
