Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 1 Feb 2013 17:58:44 +0100
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: NTLMv1 and MSCHAPv2 (was: NetNTLMv1)

On 1 Feb, 2013, at 11:51 , Solar Designer <solar@...nwall.com> wrote:
> On Fri, Feb 01, 2013 at 07:24:22AM +0400, Solar Designer wrote:
>> Anyhow, I've attached a patch that tries to speedup cmp_all() by use of
>> a bitmap.
> 
> There's a bug in that patch: the mem_alloc_tiny() call for bitmap
> allocation should be changed to mem_calloc_tiny().
> 
> I initially had a memset() in crypt_all(), but later #if 0'ed it out in
> favor of another approach - but forgot that the bitmap was not zeroized
> in init().  This needs to be corrected (as above).

Fixed. I have also merged the same exploit and SIMD code to MSCHAPv2. That format is very similar - in JtR all main functions are identical except get_salt() so this was very wasy. Actually we should wrap them in the same source file so we don't need to incorporate the same optimizations to both formats in the future.

Jumbo-7 vs. current code:

Benchmarking: MSCHAPv2 C/R MD4 DES [32/64]... DONE
Many salts:	3902K c/s real, 3902K c/s virtual
Only one salt:	2727K c/s real, 2727K c/s virtual

Benchmarking: MSCHAPv2 C/R MD4 DES [128/128 SSE2 intrinsics 12x]... DONE
Many salts:	1068M c/s real, 1068M c/s virtual
Only one salt:	39541K c/s real, 39541K c/s virtual


Benchmarking: NTLMv1 C/R MD4 DES (ESS MD5) [32/64]... DONE
Many salts:	3895K c/s real, 3895K c/s virtual
Only one salt:	2722K c/s real, 2722K c/s virtual

Benchmarking: NTLMv1 C/R MD4 DES (ESS MD5) [128/128 SSE2 intrinsics 12x]... DONE
Many salts:	1129M c/s real, 1129M c/s virtual
Only one salt:	37917K c/s real, 37917K c/s virtual


BTW these figures are without AVX because apparently the OSX assembler doesn't have a clue about such things, so using a real gcc does not help. That is just ridiculous.

magnum

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.