john-users - Re: JTR Vs PasswordPro

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

Order Openwall Wordlists CD (20+ languages) with delivery worldwide or download

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Mon, 23 Apr 2007 23:44:42 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: JTR Vs PasswordPro

On Mon, Apr 23, 2007 at 09:23:22PM +0200, websiteaccess wrote:
>   RAW-MD5

That's all you had to say.  As you're aware, JtR does not support raw
MD5 hashes officially.  The contributed patch is obviously very far from
being optimal.

So what you were benchmarking was not JtR, but rather the known-unoptimal
contributed patch.

However, you might obtain better results with JtR than with PasswordPro
in practice - even when cracking raw MD5 hashes - due to JtR's smarter
order in which candidate passwords are tried.  This should be best seen
if you run both programs against large numbers of hashes.

> > - number of loaded hashes and different salts (if applicable);
> 
>  1 (passwordpro used as demo (limited to 1 hash)

With just 1 raw MD5 hash, you may also try MDCrack for even better
performance - http://c3rb3r.openwall.net/mdcrack/

>  Passwordpro has a BIG advantage, a Graphic Interface !

Yes, and it also has a big disadvantage - the lack of a command-line
interface - correct? ;-)

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: 5B341F15  fp: B3FB 63F4 D7A3 BCCC 6F6E  FC55 A2FC 027C 5B34 1F15
http://www.openwall.com - bringing security into open computing environments

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.