Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 19 Jul 2006 18:14:03 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Unable to crack passwords

On Wed, Jul 19, 2006 at 07:11:14PM +0530, V, Bharath (Bharath) wrote:
> I am using Blow Fish algorithm to encrypt the password and Password is
> "hello"

This doesn't make sense - or it might not be a complete description of
what you're doing.

Blowfish is a block cipher.  It encrypts data with a key, allowing for
quick decryption given the key.  In your case, is "hello" the data to
encrypt (with what key?) or the key you're encrypting some other data
with (what data?), or is it both the data and the key?

What are you doing this for?

Most likely, Blowfish - or any other fast cipher, for that matter - is
not appropriate for your task.  Instead, you might need to use a
higher-level algorithm specifically intended for password hashing.

The Blowfish-based password hashing method (known as bcrypt) that JtR
supports has very different properties from Blowfish itself.  You can
find a description of this hashing method in the paper linked from:

	http://www.openwall.com/crypt/
 
-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ