Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 23 Jan 2013 23:55:54 +0100
From: Frank Dittrich <frank_dittrich@...mail.com>
To: john-dev@...ts.openwall.com
Subject: Re: External mode filter vs max length

On 01/23/2013 11:49 PM, Frank Dittrich wrote:
> On 01/23/2013 11:43 PM, magnum wrote:
>> So there is room for improvement here, but it is specific to the new options but External mode filters in general. We could do something like this:
>>
>> 1. All places that currently check for min/max lengths should refrain from doing so if an external filter is used.
>>
>> 2. The external mode (not the john.conf stuff, but external.c) should enforce the limits to the *final* candidate.
> 
> 3. If the length is greater than maximum length for the format in
> question (because the external mode didn't care about any limits), the
> password must be truncated to the format's maximum length (because many
> formats rely on this).

I just realized that's exactly what you suggested.
Time to get some sleep.

Frank

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.