Date: Wed, 19 Jul 2006 18:14:03 +0400 From: Solar Designer <solar@...nwall.com> To: john-users@...ts.openwall.com Subject: Re: Unable to crack passwords On Wed, Jul 19, 2006 at 07:11:14PM +0530, V, Bharath (Bharath) wrote: > I am using Blow Fish algorithm to encrypt the password and Password is > "hello" This doesn't make sense - or it might not be a complete description of what you're doing. Blowfish is a block cipher. It encrypts data with a key, allowing for quick decryption given the key. In your case, is "hello" the data to encrypt (with what key?) or the key you're encrypting some other data with (what data?), or is it both the data and the key? What are you doing this for? Most likely, Blowfish - or any other fast cipher, for that matter - is not appropriate for your task. Instead, you might need to use a higher-level algorithm specifically intended for password hashing. The Blowfish-based password hashing method (known as bcrypt) that JtR supports has very different properties from Blowfish itself. You can find a description of this hashing method in the paper linked from: http://www.openwall.com/crypt/ -- Alexander Peslyak <solar at openwall.com> GPG key ID: B35D3598 fp: 6429 0D7E F130 C13E C929 6447 73C3 A290 B35D 3598 http://www.openwall.com - bringing security into open computing environments Was I helpful? Please give your feedback here: http://rate.affero.net/solar -- To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply to the automated confirmation request that will be sent to you.
Powered by blists - more mailing lists
Powered by Openwall GNU/*/Linux - Powered by OpenVZ