Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 27 Dec 2009 19:32:52 +0300
From: Solar Designer <>
Subject: Re: JtR 1.7.4 and jumbo patch update

On Sun, Dec 27, 2009 at 05:18:31PM +0100, wrote:
>  I compared speed between JTR 1.7.4 (with john-1.7.4-jumbo-1.diff.gz) 


> and JTR ( john-1.7.4-jumbo-1.diff.gz + Jim patch 

This is confusing.  It is not clear what version you actually had here.
Anyhow, if one of the builds had Jim's patch applied and the other did
not, then such a comparison is not very useful.  If you wanted to see
the effect of Jim's patch, you should have been using the same base
version of JtR in both cases (but I think you had done that earlier).

>  here it is the stats : (same wordlist : 536875 words, same hashlist : 
> 2 millions, same rules (mine), same computer)


> --john 1.7.4--
> guesses: 77  time: 0:00:00:06 2%  c/s: 236251M  trying: jugum - 
> juillenay
> --john
> guesses: 247  time: 0:00:00:05 0.00% (ETA: Mon Dec 28 20:57:24 2009)  
> c/s: 2867880M  trying: maizu - mdiek
> JTR 1.7.4 has found 77 passwords in 6 seconds -> c/s: 236251M
> JTR has found 247 passwords in 5 seconds -> c/s: 2867880M 

This is weird.  If you were using the same wordlist and the same
ruleset, then there should be no difference in the number of cracked
passwords.  However, both of your sessions were only running for a few
seconds.  I would not rely on incomplete sessions like that for a
comparison.  From the above, we do not know whether both runs would
eventually crack the same passwords or not.  If you want to compare two
versions/builds of JtR, please adjust your wordlist and/or ruleset such
that the sessions actually terminate soon enough (e.g., in a few
minutes) and compare their final outputs.



Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.