john-users - Re: md5_gen(0) broken for ages?

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 25 Feb 2011 18:12:14 -0600
From: "JimF" <jfoug@....net>
To: <john-users@...ts.openwall.com>
Subject: Re: md5_gen(0) broken for ages?

> Now I could reproduce it without Simons link from raw-md5. I had to use 
> longer input lines (with more fields).
>
> $ cat test/testm.rawmd5
> testcz:md5_gen(0)65775a4b0631c2b88117153163b921a0:123
> testcz2:md5_gen(0)1826e74f4ab2a9c728b2f53445e0af6c:456
>
> Loaded 8 password hashes with 6 different salts ( md5_gen(0): md5($p) 
> (raw-md5)  [md5-gen 64x1])
>
> If you strip all fields after the hashes, it does not happen. So currently 
> we can not use single mode with md5_gen(0)!

Thank you for this information.  This explains the problem, and I will look 
into it.

> And here is a separate problem: I can not load raw-md5 using command-line 
> format and subformat
>
> $ cat test/test.rawmd5
> testcz:65775a4b0631c2b88117153163b921a0
> testcz2:1826e74f4ab2a9c728b2f53445e0af6c
>
> $ rm -f deleteme
> $ ./john-1.7.6-jumbo7 
> test/test.rawmd5 -fo:md5-gen -sub=md5_gen\(0\) -pot:deleteme
> No password hashes loaded

you would not use md5-gen in this instance.  You would use raw-md5

Jim.