Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 23 Mar 2012 20:14:27 +0530
From: Dhiru Kholia <dhiru.kholia@...il.com>
To: john-dev@...ts.openwall.com
Subject: Re: PoC cracker for Mozilla Firefox and Thunderbird passwords.

On Fri, Mar 23, 2012 at 1:20 AM, magnum <john.magnum@...hmail.com> wrote:
> On 03/22/2012 04:21 PM, Dhiru Kholia wrote:
>> It contains an ugly hack to bypass format self-tests.
>
> I haven't really looked at your code yet, but the easiest way to avoid
> self-test is to not provide any. This is in bench.c:
>
> /* Silently skip DIGEST-MD5 (for which we have no tests), unless forced */
>                if (!format->params.tests && format != fmt_list)
>                        continue;

Hi magnum,

How did earlier version of DIGEST-MD5 do it? I wrote NULL in place of
mozilla_tests in struct fmt_main mozilla_fmt. However running the
benchmark gives  "Benchmarking: Mozilla [32/64]... FAILED (no data)"
message. Is this normal and expected message?

Also if I want to include this patch in jumbo, what would be a proper
way to modify the Makefile? I want this plug-in to be automatically
disabled in case NSS is not installed (instead of generating
compilation errors). Thanks!

I am adding OMP support for this patch currently and if there is
enough interest maybe this patch can go in jumbo. What do you think?

-- 
Cheers,
Dhiru

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.