Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 9 Jan 2016 14:42:05 +0100
From: magnum <>
Subject: Re: -min-len / -max-len oddities with accented letters

On 2016-01-08 20:41, Patrick Proniewski wrote:
> Hello,
> I'm pretty sure it's known problem: I'm currently using JohnTheRipper-bleeding-jumbo, compiled the 7th of december, on FreeBSD 10.x, and I'm trying to crack passwords with those options:
> ./john --fork=4 --session=MYSESS --rules=ALL --wordlist=mots_francais_plus_plus_alpha.dic -min-len=15 -max-len=16 PWDDUMP.20151205
> I've just cracked a 14 char length password, with an accented letter.
> Earlier, playing with -min-len=13 -max-len=14 I've cracked a 12 char password, with an accented letter too.
> Is that to be expected?

Yes. The -min/max-len options are actually counting bytes and using 
UTF-8 any non-ASCII character take between two and four bytes.

We've had wild ideas about making a fork of Jumbo that internally uses 
UTF-32 for all character handling. That would remove some bottlenecks 
and limitations but introduce others. But it would make things like this 
more consistent.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.