Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 10 Feb 2013 01:40:55 +0100
From: magnum <john.magnum@...hmail.com>
To: john-users@...ts.openwall.com
Subject: Re: SSHA-512 supported?

On 10 Feb, 2013, at 1:27 , Solar Designer <solar@...nwall.com> wrote:

> Jon -
> 
> On Fri, Feb 08, 2013 at 03:24:52PM -0500, Jon Schipp wrote:
>> I have a salted SHA-512 hash that I'm having trouble cracking, it's from an
>> AIX 5.3 OS, using their Pluggable Authentication Modules.
>> The /etc/security/passwd file has account information in stanzas:
>> 
>> test:
>>        password =
>> {ssha512}06$aXayEJGxA02Bl4d2$TWfWx34oD.UjrS/Qtco6Ij2XPY1CPYJfdk3CcxEjnMZvQw2p5obHYH7SI2wxcJgaS9.S9Hz948R.GdGwsvR...
> 
> Can you run these commands on your AIX and post their output, please?
> 
> time perl -e '$p = "{ssha512}04$................"; print crypt("", $p), "\n"; for ($n = 0; $n < 100000; $n++) { $c = crypt($n, $p); print "$n $c\n" if ($c =~ /\.\.\.[^\$]*$/); }'
> 
> time perl -e '$p = "{ssha512}06$................"; print crypt("", $p), "\n"; for ($n = 0; $n < 100000; $n++) { $c = crypt($n, $p); print "$n $c\n" if ($c =~ /\.\.\.[^\$]*$/); }'
> 
> time perl -e '$p = "\$6\$................"; print crypt("", $p), "\n"; for ($n = 0; $n < 100000; $n++) { $c = crypt($n, $p); print "$n $c\n" if ($c =~ /\.\.\.[^\$]*$/); }'
> 
> In case there are any issues with shell escaping here, please run the
> commands in bash (I tested the last of the three in bash on Linux).



The first two need the '$' escaped just like the third:

time perl -e '$p = "{ssha512}04\$................"; print crypt("", $p), "\n"; for ($n = 0; $n < 100000; $n++) { $c = crypt($n, $p); print "$n $c\n" if ($c =~ /\.\.\.[^\$]*$/); }'

time perl -e '$p = "{ssha512}06\$................"; print crypt("", $p), "\n"; for ($n = 0; $n < 100000; $n++) { $c = crypt($n, $p); print "$n $c\n" if ($c =~ /\.\.\.[^\$]*$/); }'


magnum

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.