Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 27 Jul 2015 11:03:10 -0400
From:  <jfoug@....net>
To: john-dev@...ts.openwall.com
Subject: Re: auditing our use of FMT_* flags

---- Kai Zhao <loverszhao@...il.com> wrote: 
> 
> If LM is special, how about saph?
> 
> E.g.:
> 
> sapH_fmt_plug.c:
> 
> static struct fmt_tests tests[] = {
>         {"{x-issha,
> 1024}hmiyJ2a/Z+HRpjQ37Osz+rYax9UxMjM0NTY3ODkwYWI=","OpenWall"},
>         ...
>         {NULL}
> };
> 
> This format doesn't set FMT_CASE. So the password is case-insensitive.
> But if I change "OpenWall" to "OpenWalL", the self-test will fail.

As magnum stated, you can not change the passwords in the test vectors and have things work.  I do not think the logic that properly cases the passwords is not done during self test.

I do believe that the sapH format 'should' have the FMT_CASE flag.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.