john-users - Re: Unable to crack passwords

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

Order Openwall Wordlists CD (20+ languages) with delivery worldwide or download

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Wed, 19 Jul 2006 18:14:03 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Unable to crack passwords

On Wed, Jul 19, 2006 at 07:11:14PM +0530, V, Bharath (Bharath) wrote:
> I am using Blow Fish algorithm to encrypt the password and Password is
> "hello"

This doesn't make sense - or it might not be a complete description of
what you're doing.

Blowfish is a block cipher.  It encrypts data with a key, allowing for
quick decryption given the key.  In your case, is "hello" the data to
encrypt (with what key?) or the key you're encrypting some other data
with (what data?), or is it both the data and the key?

What are you doing this for?

Most likely, Blowfish - or any other fast cipher, for that matter - is
not appropriate for your task.  Instead, you might need to use a
higher-level algorithm specifically intended for password hashing.

The Blowfish-based password hashing method (known as bcrypt) that JtR
supports has very different properties from Blowfish itself.  You can
find a description of this hashing method in the paper linked from:

	http://www.openwall.com/crypt/

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.