john-users - Re: NTLM scalability improve

Openwall GNU/*/Linux 3.0 - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 25 Mar 2011 01:11:10 +0100
From: magnum <rawsmooth@...dband.net>
To: john-users@...ts.openwall.com
Subject: Re: NTLM scalability improve

On 2011-03-24 22:42, Alain Espinosa wrote:
> Changes to NTLM format to perform better with huge number of hashes.
>
> As you can see the improve is significant.

You can say that again! I tried it with 2M test hashes. Without this 
patch, just _loading_ them took 47 seconds, then the c/s was reported as 
31200M (even though the initial loading time does not affect the c/s 
figure).

With the patch, loading them took about 2 seconds, after which it 
completed inc:digits in about 39 seconds (still 6 seconds before the 
unpatched version even had started cracking!). And speed was reported as 
5698005M c/s...

...speaking of that, I enclose a patch that make John say 5698G c/s 
instead (it's from fullMPI), is there any reason not to include this in 
the Jumbo?

magnum

diff -urpN john-1.7.6-jumbo-12/src/status.c john-1.7.6-jumbo-12-gcps/src/status.c
--- john-1.7.6-jumbo-12/src/status.c	2010-06-14 23:23:13.000000000 +0000
+++ john-1.7.6-jumbo-12-gcps/src/status.c	2011-03-24 23:43:56.000000000 +0000
@@ -116,6 +116,9 @@ static char *status_get_cps(char *buffer
 	if (use_ticks) mul64by32(&cps, clk_tck);
 	div64by32(&cps, time);

+	if (cps.hi >= 232)
+		sprintf(buffer, "%uG", div64by32lo(&cps, 1000000000));
+	else
 	if (cps.hi || cps.lo >= 1000000000)
 		sprintf(buffer, "%uM", div64by32lo(&cps, 1000000));
 	else