Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 05 Jan 2015 02:02:23 +0100
From: Frank Dittrich <frank.dittrich@...lbox.org>
To: john-users@...ts.openwall.com
Subject: Re: john-1.8.0: --format=crypt trouble with invalid
 DES hashes

On 01/04/2015 07:21 PM, Frank Dittrich wrote:
> I discovered a problem (both in core and in jumbo) with --format=crypt.
> 
> 
> ((detached from 1.8.0))run $ cat fail_crypt.pw
> 1:+9F93o1OxwgK1
> 2:$6$LKO/Ute40T3FNF95$6S/6T2YuOIHY0N3XpLKABJ3soYcXD9mB7uVbtEZDj/LNscVhZoZ9DEH.sBciDrMsHOWOoASbNLTypH/5X26gN0
> 3:CCNf8Sbh3HDfQ
> 
> ((detached from 1.8.0))run $ ./john --format=crypt
> --wordlist=password.lst fail_crypt.pw
> Warning: hash encoding string length 13, type id #1
> appears to be unsupported on this system; will not load such hashes.
> Loaded 1 password hash (crypt, generic crypt(3) [?/64])
> Self test failed (valid)

Somewhat related:
While --format=descrypt correctly rejects 3 of these hashes as invalid,
--format=crypt doesn't.

?:CCNf8Sbh3HDfT
?:CCNf8Sbh3HDfS
?:CCNf8Sbh3HDfR
?:CCNf8Sbh3HDfQ

Frank

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.