Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 25 Feb 2011 02:49:50 +0100
From: magnum <>
Subject: Re: md5_gen(0) broken for ages?

On 02/25/2011 01:30 AM, I wrote:
> After applying the intrinsics fixes, raw-md5 is broken for me. It claims
> there are a number of salts (for tens of thousands of hashes, it claimed
> some 190 salts, for 10 hashes, it claimed 9 salts... maybe something
> uninitialized?). And, probably as a consequence of this, it's AWFULLY
> slow (while the benchmark show almost a 2x speedup).

This is really just a false salt issue. Attacking only one hash, I get 
wonderful figures (I am exhausting inc:digits in both cases):

$ ./john-jumbo12E1-intr test.hash -fo:raw-md5 -inc:digits
Using raw-md5 mode, by linking to md5_gen(0) functions
Loaded 1 password hash (Raw MD5 [gen])
guesses: 0  time: 0:00:00:09  c/s: 12196K  trying: 83536056 - 83536784

$ ./john-jumbo12E1 test.hash -fo:raw-md5 -inc:digits
Loaded 1 password hash (Raw MD5 [raw-md5 64x1])
guesses: 0  time: 0:00:00:22  c/s: 4936K  trying: 83536787 - 83536784

That's significantly better than 2x! Kudos to anyone involved.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.