Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 19 Sep 2011 22:47:01 +0200
From: Nicolas RUFF <nicolas.ruff@...il.com>
To: john-users@...ts.openwall.com
Subject: md5(unicode($u."&".$p)) eventually working ...

	Hello,

After one hour of printf-debugging, I eventually solved the issue. May
this email serves for future reference on $u usage ...

There were two mistakes in my sample:

1/ If any kind of salt is used, *including username*, MGF_SALTED must be
specified.

A valid configuration file is:
------------------------------
[List.Generic:md5_gen(1009)]
Expression=md5(unicode($u."&".$p))
Flag=MGF_USERNAME
Flag=MGF_SALTED
Flag=MGF_NOTSSE2Safe
Func=MD5GenBaseFunc__clean_input
Func=MD5GenBaseFunc__setmode_unicode
Func=MD5GenBaseFunc__append_userid
Func=MD5GenBaseFunc__append_input1_from_CONST1
Func=MD5GenBaseFunc__append_keys
Func=MD5GenBaseFunc__crypt
CONST1=&
Test=md5_gen(1009)ca6ebcf4d6ed610ef1fb7316f9f415db$$Uroot:casque
------------------------------

2/ Input file format must be the following:
username1:hash$$Uusername2

* username2 is used for hash computation.
* username1 is used for display purpose only, it can even differ from
username2.

This holds valid as of john-1.7.8-jumbo-6rc2 on Linux x86.

Regards,
- Nicolas RUFF

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.