Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 2 Jul 2015 23:40:54 +0300
From: Aleksey Cherepanov <>
Subject: LM and halves, length limit, does john "attack" halves together?

I'd like to know how john handles candidates in relation to halves of

Let's consider "Password1" password. There will be 2 LMs with
passwords: PASSWOR and D1 . Does john know that first 7 chars should
be cut off? I don't see that in code.

But I see a rule for that:

# Used for loopback. This rule will produce candidates "PASSWOR" and "D" for
# an input of "PASSWORD" (assuming LM, which has halves of length 7).
-s x**

I find "Used for loopback" misleading because john (jumbo) stores
truncated passwords in .pot. The rule is for original attack and it
should be combined with other rules. Would not it be more convenient
to do that in format itself?


Aleksey Cherepanov

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.