Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 17 Dec 2012 02:49:44 +0100
From: magnum <>
Subject: Re: gpg2john -> false positive -> how to exclude?

On 17 Dec, 2012, at 0:09 , wrote:
> Here some facts about my setup: 'make linux-x86-64-native', enabled the two "gcc with openMP" lines in the Makefile.
> the converted gpg2john hash is:
> secring.gpg:$gpg$*17*24*1024*2fd8c6834db06ddfe073fd944b6bd8dbd268163e6374ef6f*3*255*2*3*8*bf07a2f4faafa916*65536*6c7784ea65895667
> the one false positive i got is in clear-text: bortaloo
> (which is not my phrase | and thus does not work for unlocking)
> output of gpg --list-secret-keys is:
> ---------------------------
> sec   1024D/615B53E0 2001-01-29
> uid                  Donny
> ssb   1024g/8646A815 2001-01-29

I can confirm that both the CPU and GPU formats states that "bortaloo" is a valid guess. I can't see anything amiss with the format - possibly we just need more validating code in order to avoid false positives.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.