Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 14 Jan 2014 14:17:10 -0500
From: Rich Rumble <>
Subject: Re: Cracking MSChap v2

On Tue, Jan 14, 2014 at 1:37 PM, magnum <> wrote:
> The optimized version brute forces the last third of the MD4 (NT hash) once
> and for all when loading the ciphertext, a DES key space of just 2^16. The
> inner loop just do an MD4 from the candidate and if the last third doesn't
> match the bruted one, it's rejected without wasting more time on it. For any
> number of salts, we still only need that single MD4 and that's why the many
> salts speed is so good.
How does that look in the pot file? I'm assuming it's the same as the
input hash+challenge in the pot, and not the "striped" hash and
challenge. Would it be easy to output the hash after the last 1/3rd is
BF'd? Maybe a verbose setting or some such with that format? I think,
since JtR is doing that method, the OP (and now me:) would like that
option, put it on a To-Do/Wishlist. Again someone would have to write
a patch, but sounds possible. Thanks for the info also!

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.