Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 25 Feb 2011 16:51:31 +0100
From: magnum <rawsmooth@...dband.net>
To: john-users@...ts.openwall.com
Subject: Re: md5_gen(0) broken for ages?

Now I could reproduce it without Simons link from raw-md5. I had to use 
longer input lines (with more fields).

$ cat test/testm.rawmd5
testcz:md5_gen(0)65775a4b0631c2b88117153163b921a0:123
testcz2:md5_gen(0)1826e74f4ab2a9c728b2f53445e0af6c:456
Alice:md5_gen(0)5f4dcc3b5aa765d61d8327deb882cf99:789
Bob:md5_gen(0)1c0b76fce779f78f51be339c49445c49::
security:md5_gen(0)e91e6348157868de9dd8b25c81aebfb9:abc
securiteam:md5_gen(0)1d167077e74e969b9b7d34b2d901d697:hellothere
SecuriTeam:md5_gen(0)0a6b8933fcc5ea8234d49769de76cddc:
wordpress:md5_gen(0)1870a829d9bc69abf500eca6f00241fe:

$ rm -f deleteme ; ./john-jumbo12E1-intr test/testm.rawmd5 -inc:digits 
-pot:deleteme
Loaded 8 password hashes with 6 different salts ( md5_gen(0): md5($p) 
(raw-md5)  [SSE2 10x4x3 (intr)])

...and this also happens with a much older version:

$ rm -f deleteme ; ./john-1.7.6-jumbo7 test/testm.rawmd5 -inc:digits 
-pot:deleteme
Loaded 8 password hashes with 6 different salts ( md5_gen(0): md5($p) 
(raw-md5)  [md5-gen 64x1])

If you strip all fields after the hashes, it does not happen. So 
currently we can not use single mode with md5_gen(0)!


And here is a separate problem: I can not load raw-md5 using 
command-line format and subformat

$ cat test/test.rawmd5
testcz:65775a4b0631c2b88117153163b921a0
testcz2:1826e74f4ab2a9c728b2f53445e0af6c
Alice:5f4dcc3b5aa765d61d8327deb882cf99
Bob:1c0b76fce779f78f51be339c49445c49
security:e91e6348157868de9dd8b25c81aebfb9
securiteam:1d167077e74e969b9b7d34b2d901d697
SecuriTeam:0a6b8933fcc5ea8234d49769de76cddc
wordpress:1870a829d9bc69abf500eca6f00241fe

$ rm -f deleteme
$ ./john-1.7.6-jumbo7 test/test.rawmd5 -fo:md5-gen -sub=md5_gen\(0\) 
-pot:deleteme
No password hashes loaded

magnum

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.