Date: Sat, 17 Jun 2006 04:36:59 +0400 From: Solar Designer <solar@...nwall.com> To: john-users@...ts.openwall.com Subject: Re: Re: Inverted chatsets? On Sat, Jun 17, 2006 at 12:54:11AM +0300, Pietari Kivikangas wrote: > Total amount of all possible password candidates: 6634204312890625 That's correct, for the 95 printable US-ASCII characters and passwords of exactly 8 characters long. > Approximated total number of password candidates within the 'rec_entry' > value 3000: 0x00000057cfdce769 = 377149515625, i.e. about 0.00568% of > all passwords. > Approximated total number of password candidates within the 'rec_entry' > value 3419: 0x00003afa8baa2780 = 64847759419264, i.e. about 0.97748% of > all passwords. I'm not sure how you've derived those numbers, but they look reasonable. > So in both cases the probability for a single candidate is equal, That's just your assumption. In John the Ripper, each candidate password in entry 3419 is assumed to be less likely to be one of the passwords that we're searching for than any candidate password in entry 3000. That's the whole point in ordering the candidate passwords in this way. > i.e. 0.00568% / 377149515625 = 0.97748% / 64847759419264 = You've merely checked your own math here. You have not proven anything. > But for the 'rec_entry' value 3419 there are much more password > candidates than for 3000. That's true. So not only each of them is less probable but there are also more of them - making it even more unreasonable to do the search backwards as Phantom has suggested. -- Alexander Peslyak <solar at openwall.com> GPG key ID: B35D3598 fp: 6429 0D7E F130 C13E C929 6447 73C3 A290 B35D 3598 http://www.openwall.com - bringing security into open computing environments
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.