Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 21 Nov 2012 22:05:54 -0800 (PST)
From: wfdawson <wfdawson@...lsouth.net>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: Re: What do you recommend as a laptop cracking station? :)

I've been thinking about a new system for myself, also.  What spells Xmas like crushing credit card debt, after all. :-)  

Not having my own system newer than a 10 year old workstation, I'm using a work-supplied laptop (Dell E6410, i5, 8GB RAM, SAMSUNG SSD 830) for cracking.  It's hardly the sort of thing to brag about.  Indeed, heat is my biggest enemy.  I've long since blown out the heat sink / fan on this loser.  It only manages to keep limping along with the USB powered laptop cooler attached.  I suspect the same would be true for  other laptops as well.  My next company supplied laptop will be a Lenovo, though not a y580 (sadly).

It may be worthwhile to compare numbers to get an idea of what the latest, greatest laptop hardware vs. an older model buys one.  Incidentally, I'm using Pentoo from portage overlay (not the live builds), but updated more or less daily.  The latest available (test) build from Gentoo for john is "1.7.9-r5", though john reports somewhat differently.

Strangely enough, this system outperforms the Lenovo y580 on the CPU (not CUDA, obviously) benchmarks for M$ Cache Hash MD4 and NTLMv2 C/R MD4 HMAC-MD5 runs.  Odd, what?  I didn't see additional hardware details like RAM and SSD vs. HDD mentioned, but those will obviously have some impact on overall performance.  On the other hand, they're "just" benchmarks so have to be viewed with some distrust, anyway.

ver: 1.7.9-jumbo-7_omp [linux-x86-64]

Benchmarking: M$ Cache Hash MD4 [32/64]... (4xOMP) DONE
Many salts:     37584K c/s real, 9396K c/s virtual
Only one salt:  13199K c/s real, 3308K c/s virtual

Benchmarking: M$ Cache Hash 2 (DCC2) PBKDF2-HMAC-SHA-1 [128/128 SSE2 intrinsics 8x]... (4xOMP) DONE
Raw:    355 c/s real, 89.0 c/s virtual

Benchmarking: MS SQL SHA-1 [128/128 SSE2 intrinsics 8x]... DONE
Many salts:     4124K c/s real, 4044K c/s virtual
Only one salt:  3460K c/s real, 3495K c/s virtual

Benchmarking: NTLMv2 C/R MD4 HMAC-MD5 [32/64]... (4xOMP) DONE
Many salts:     2228K c/s real, 555666 c/s virtual
Only one salt:  1720K c/s real, 431157 c/s virtual


Using latest unstable build from git (ver: 1.7.9-jumbo-7+unstable_omp [linux-x86-64i]), the results are comparable, except now my i5 outperforms the y580 CPU on the M$ Cache Hash 2 (DCC2) PBKDF2-HMAC-SHA-1 run also.


Benchmarking: M$ Cache Hash MD4 [32/64]... (4xOMP) DONE
Many salts:     37953K c/s real, 9512K c/s virtual
Only one salt:  13066K c/s real, 3266K c/s virtual


Benchmarking: M$ Cache Hash 2 (DCC2) PBKDF2-HMAC-SHA-1 [128/128 SSE2 intrinsics 8x]... (4xOMP) DONE
Raw:    1312 c/s real, 327 c/s virtual

Benchmarking: MS SQL SHA-1 [128/128 SSE2 intrinsics 8x]... DONE
Many salts:     14171K c/s real, 14171K c/s virtual
Only one salt:  8838K c/s real, 8928K c/s virtual

Benchmarking: NTLMv2 C/R MD4 HMAC-MD5 [32/64]... (4xOMP) DONE
Many salts:     2189K c/s real, 552960 c/s virtual
Only one salt:  1720K c/s real, 431157 c/s virtual


My personal interest of the moment (and the past 12 months or so) is with Lotus Domino unsalted and salted hashes.

Benchmarking: Lotus Notes/Domino 6 More Secure Internet Password [8/64]... DONE
Many salts:     117593 c/s real, 117593 c/s virtual
Only one salt:  69995 c/s real, 69995 c/s virtual

Benchmarking: Lotus Notes/Domino 5 [8/64]... (4xOMP) DONE
Raw:    594432 c/s real, 148608 c/s virtual


I'd like to see benchmark results for these two hash format and hardware info from other platforms, if anyone is willing to oblige.

Thanks!




________________________________
 From: groszek <necro@...icon.pl>
To: john-users@...ts.openwall.com 
Sent: Wednesday, November 21, 2012 2:52 PM
Subject: Re: [john-users] What do you recommend as a laptop cracking station? :)
 
On 11/21/2012 06:37 PM, Richard Miles wrote:
> Hi
> 
> I'm considering buying a new laptop and I want to do a decision based on
> specs to crack passwords, in other words, I need a real animal to crack
> passwords, I now that laptops are not as powerful as desktops, but I hope
> to find something really good.
> 
> I looked at AllienWare and Macbook PRO and I got a bit frustrated. I don't
> know if it exist, but I was looking for a laptop with at least 8 cores and
> at least one AMD 7970GPU. Do you have any recommendation? Or suggestion of
> better configuration for a laptop being used as a password cracking
> station? :)
> (...)

Basically you look at gaming laptops and read the specs of the nvidia
card it has ;)

While laptop is not a perfect choice for cracking passwords, if you need
new laptop I totally understand why you want a tool that can be used
*when really needed* to crack passwords. I'm on the same boat, and just
two weeks ago got myself lenovo y580. Pretty cheap beast with i7-3610QM
and nvidia gtx 660m. If you're interrested, little test:

John the Ripper password cracker, ver: 1.7.9-jumbo-7 [linux-x86-64-cuda]

Benchmarking: M$ Cache Hash MD4 [32/64]... DONE
Many salts:     20956K c/s real, 20956K c/s virtual
Only one salt:  8502K c/s real, 8502K c/s virtual

Benchmarking: M$ Cache Hash MD4 [CUDA (inefficient, development use
only)]... DONE
Many salts:     17762K c/s real, 17941K c/s virtual
Only one salt:  15042K c/s real, 14893K c/s virtual

Benchmarking: M$ Cache Hash 2 (DCC2) PBKDF2-HMAC-SHA-1 [CUDA]... DONE
Raw:    4517 c/s real, 4517 c/s virtual

Benchmarking: M$ Cache Hash 2 (DCC2) PBKDF2-HMAC-SHA-1 [128/128 AVX
intrinsics 8x]... DONE
Raw:    1088 c/s real, 1077 c/s virtual

Benchmarking: MS SQL SHA-1 [128/128 AVX intrinsics 8x]... DONE
Many salts:     20010K c/s real, 20212K c/s virtual
Only one salt:  7922K c/s real, 7922K c/s virtual

Benchmarking: NTLMv2 C/R MD4 HMAC-MD5 [32/64]... DONE
Many salts:     940544 c/s real, 940544 c/s virtual
Only one salt:  766976 c/s real, 766976 c/s virtual

I think it's totally acceptable for everyday cracking ... or it will
tell you laptop isn't good after all ;)

This laptop is what I really recommend, great quality, decent price and
beast of a power. If you need a benchmark of any other particular hash
let me know.

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.