Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 29 Jun 2012 00:27:49 +0200
From: magnum <>
Subject: Re: raw-sha2 CUDA fails IRL (it seems)

On 2012-06-29 00:20, jfoug wrote:
> NOTE, the ts's pw.dic file will SMASH formats that do not protect
> themselves from buffer overruns.

You keep saying that and I keep arguing that Jumbo (as opposed to core
John) truncates to PLAINTEXT_LENGTH before serving candidates to
set_key() - so very fast formats should not waste time on length checks.
Having said that, obviously if you announce a larger PLAINTEXT_LENGTH
than you can actually handle, you will be run over.

Also, it *will* smash get_salt() if it's not protected.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.