Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 22 Mar 2013 15:55:55 +0000 (GMT)
From: Costin Enache <e_costin@...oo.com>
To: "john-dev@...ts.openwall.com" <john-dev@...ts.openwall.com>
Subject: sunmd5 round count fixed to 500? [patch]

I've just noticed that the sunmd5 (sunmd5_fmt_plug.c) plugin has the rounds=904 hard coded, and won't load hashes with rounds=0 (so just 4096) or with other number of rounds. Guess it was somehow forgotten like that ... the fantastic "patch" below allows hashes like the following ones to be processed just fine:

$md5,rounds=1000$cd/IPUR.$$cK9VFbjyCVafobmZ11.qD1
$md5,rounds=904$ZVM0Ra/u$$5Shz0OCYcP2SSj4ltgYn./
$md5$6GiSSeL0$$F6rRJpg4Ee2hPN9kSFkoN0
$md5$eY5jk40I$$j3T35bMT4Alrk8rMCFBmE.

Cheers,
Costin




--- sunmd5_fmt_plug.c.orig      2013-03-22 16:47:41.000000000 +0100
+++ sunmd5_fmt_plug.c   2013-03-22 16:43:45.000000000 +0100
@@ -89,8 +89,8 @@
 #define BENCHMARK_LENGTH               -1
 
 // There 'ARE' more types, but we only handle these 2, at this time.
-#define MAGIC  "$md5,rounds=904$"
-#define MAGIC2 "$md5$rounds=904$"
+#define MAGIC  "$md5,"
+#define MAGIC2 "$md5$"
 
 /* THIS one IS a depricated sun string, but for real:  $md5$3UqYqndY$$6P.aaWOoucxxq.l00SS9k0: Sun MD5 "password"  */
 /* $md5,rounds=5000$GUBv0xjJ$$mSwgIswdjlTY0YxV7HBVm0   passwd  This one was the python code from http://packages.python.org/passlib/lib/passlib.hash.sun_md5_crypt.html, but the rounds are busted. */
Content of type "text/html" skipped

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.