Date: Mon, 6 May 2013 21:24:11 -0500 From: "jfoug" <jfoug@....net> To: <john-dev@...ts.openwall.com> Subject: RE: Enhancements to pbkdf2-sha256 [was offlist] Here is a VERY early test (only sha1 and sha256 done). This shows just HOW piss ass SLLLLOOOOOOWWWW using the 'correct' oSSL pbkdf2 code is, vs the way I did it back in the mscash2 conversion ;) Now, the joy of the new code, is patching it into this format is only a couple lines changed in a couple places in the file, and it works right off the bat, woohoo! $ ../run/john -test=5 -form=aix-ssha Benchmarking: aix-ssha, AIX LPA PBKDF2-HMAC-SHA-1 / SHA-2 [32/32]... DONE Raw: 4629 c/s real, 4733 c/s virtual $ ../run/john -test=5 -form=aix-ssha Benchmarking: aix-ssha, AIX LPA PBKDF2-HMAC-SHA-1 / SHA-2 [32/32]... DONE Raw: 23831 c/s real, 24317 c/s virtual That is a 5x improvement, by simply not using the 'official/correct' PKCS5_PBKDF2_HMAC() function. I 'should' have pbkdf2_hmac_sha512 working for oSSL, but I have not tried it yet. It will not have working code for SSE2 (yet), since I have not ported that crypt into sse-intrinsics.c yet, but that is on my todo-soon list. Jim. -----Original Message----- From: magnum [mailto:john.magnum@...hmail.com] Sent: Monday, May 06, 2013 19:22 To: jfoug@....net Subject: Re: Enhancements to pbkdf2-sha256 aix-ssha has pbkdf2-hmac-sha1/256/512. That one would be great. magnum On 7 May, 2013, at 0:58 , jfoug@....net wrote: > I have enhanced pbkdf2-sha256 to be 'like' the sha1 variant. > > Includes: > > 1. multiple hashes (so we can get 128 bytes of pbkdf2 hash if needed). > 2. the skip bytes interface (like in zip). > 3. PARA should work, when/if implemented, for sha256. > > Are there any other hash types, that we should do CPU pbkdf2 for? It would be nice to have a consistant interface, where each type is simply a single include, and then a 1 (or several) line call to the code, BUT where it runs as fast as any 'hand' coded algo. It would save 100 or many more lines in each file, vs replicating that code everywhere. Hell, look at cash2. I bet that is 400 or 500 lines of code, that could be replaced by 10 or so, with no loss of speed (and possibly an increase, since there are some additional optimizations learned since I did that code). > > Jim.<JtR-bleeding-pbkdf2-256-upgrade.patch>
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.