Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 14 Apr 2019 09:26:41 -0800
From: Royce Williams <royce@...ho.org>
To: john-users@...ts.openwall.com
Cc: Denis Burykin <apingis@...nwall.net>
Subject: Re: sha512crypt & Drupal 7+ password cracking on FPGA

On Sun, Feb 3, 2019 at 3:45 AM Solar Designer <solar@...nwall.com> wrote:

> Hi,
>
> As I wrote in:
>
> https://www.openwall.com/lists/john-users/2019/01/12/1
>
> "Denis is currently working on improving these existing designs and
> removing unnecessary historical differences between them."
>
> This message is to announce the update of the sha512crypt & Drupal7
> design, bringing it in sync with the latest sha256crypt design.
>

OK, I finally carved out some time for sha512crypt testing on my ZTEX
cluster:

    https://www.techsolvency.com/passwords/ztex/

Apologies for the delay!

Note that one of my boards (#17 in my masked serials sequence) has recently
sort of "woken up", for unknown reasons. So some runs include 16 boards
instead of the usual 15. I do not expect that this board will remain
responsive indefinitely, and it is not always responsive. Interestingly,
the revived board was not one of the boards that timed out much during my
sha512crypt frequency testing.

First, I tried length 6:

$ ./john -2='1A2B3C4D5E6F7G8H9I0J' --mask='?2?2?2?2?2?2'
--format=sha512crypt-ztex --verbosity=1 --progress-every=60
pw-sha512crypt.samesalt.len6
ZTEX 10 bus:1 dev:122 Frequency:160 160 160 160
ZTEX 11 bus:1 dev:118 Frequency:160 160 160 160
ZTEX 12 bus:1 dev:113 Frequency:160 160 160 160
ZTEX 13 bus:1 dev:123 Frequency:160 160 160 160
ZTEX 14 bus:1 dev:119 Frequency:160 160 160 160
ZTEX 15 bus:1 dev:114 Frequency:160 160 160 160
ZTEX 16 bus:1 dev:111 Frequency:160 160 160 160
ZTEX 17 bus:1 dev:126 Frequency:160 160 160 160
ZTEX 18 bus:1 dev:117 Frequency:160 160 160 160
ZTEX 19 bus:1 dev:112 Frequency:160 160 160 160
ZTEX 20 bus:1 dev:121 Frequency:160 160 160 160
ZTEX 21 bus:1 dev:116 Frequency:160 160 160 160
ZTEX 22 bus:1 dev:110 Frequency:160 160 160 160
ZTEX 23 bus:1 dev:120 Frequency:160 160 160 160
ZTEX 24 bus:1 dev:115 Frequency:160 160 160 160
ZTEX 25 bus:1 dev:109 Frequency:160 160 160 160
Using default input encoding: UTF-8
Loaded 512 password hashes with no different salts (sha512crypt-ztex,
crypt(3) $6$ [sha512crypt ZTEX])
Press 'q' or Ctrl-C to abort, almost any other key for status
58g 0:00:00:06 11.20% (ETA: 06:42:44) 8.567g/s 1058Kp/s 1058Kc/s 514873KC/s
AEE5B2..14D932
510g 0:00:00:59 99.20% (ETA: 06:42:50) 8.517g/s 1060Kp/s 1060Kc/s
278632KC/s I0A69J..1BB99J
Session completed

This completed so quickly that I wasn't sure if it would be a good
benchmark, so I generated some 7-character ones as well.

I tried to replicate Solar's results with respect to frequency, but had
problems. I improved some cooling which seemed to help for a time - the
temperatures were previously only ~117F/47C, and I got them down to
~90F/32C - but I was unable to reach cluster-wide stability, even at 135:

$ ./john -2='1A2B3C4D5E6F7G8H9I0J' --mask='?2?2?2?2?2?2?2'
--format=sha512crypt-ztex --verbosity=1 --progress-every=60
pw-sha512crypt.samesalt.len7
ZTEX 10 bus:1 dev:75 Frequency:135 135 135 135
ZTEX 11 bus:1 dev:71 Frequency:135 135 135 135
ZTEX 12 bus:1 dev:66 Frequency:135 135 135 135
ZTEX 13 bus:1 dev:74 Frequency:135 135 135 135
ZTEX 14 bus:1 dev:70 Frequency:135 135 135 135
ZTEX 15 bus:1 dev:65 Frequency:135 135 135 135
ZTEX 16 bus:1 dev:63 Frequency:135 135 135 135
ZTEX 18 bus:1 dev:69 Frequency:135 135 135 135
ZTEX 19 bus:1 dev:64 Frequency:135 135 135 135
ZTEX 20 bus:1 dev:73 Frequency:135 135 135 135
ZTEX 21 bus:1 dev:68 Frequency:135 135 135 135
ZTEX 22 bus:1 dev:62 Frequency:135 135 135 135
ZTEX 23 bus:1 dev:72 Frequency:135 135 135 135
ZTEX 24 bus:1 dev:67 Frequency:135 135 135 135
ZTEX 25 bus:1 dev:61 Frequency:135 135 135 135
Using default input encoding: UTF-8
Loaded 512 password hashes with no different salts (sha512crypt-ztex,
crypt(3) $6$ [sha512crypt ZTEX])
Press 'q' or Ctrl-C to abort, almost any other key for status
7g 0:00:00:12 0.82% (ETA: 15:14:39) 0.5600g/s 844800p/s 844800c/s
448480KC/s DCIDCB1..1CJ14B1
24g 0:00:01:00 3.98% (ETA: 15:15:34) 0.3992g/s 846448p/s 846448c/s
424112KC/s 32GFGH1..1CJ10H1
47g 0:00:02:00 7.95% (ETA: 15:15:34) 0.3911g/s 846800p/s 846800c/s
415488KC/s F1F07FA..1CJ19FA
69g 0:00:03:00 11.93% (ETA: 15:15:34) 0.3828g/s 846964p/s 846964c/s
404821KC/s 11118D2..1CJ18D2
91g 0:00:04:00 15.90% (ETA: 15:15:34) 0.3786g/s 846941p/s 846941c/s
395036KC/s 11117BB..1CJ17BB
105g 0:00:05:00 19.88% (ETA: 15:15:34) 0.3495g/s 846842p/s 846842c/s
386668KC/s 316EEJB..1CJ16JB
129g 0:00:06:00 23.85% (ETA: 15:15:34) 0.3578g/s 846800p/s 846800c/s
378578KC/s 11115H3..1CJ15H3
152g 0:00:07:00 27.82% (ETA: 15:15:34) 0.3614g/s 846911p/s 846911c/s
369609KC/s 11114FC..1CJ14FC
174g 0:00:08:00 31.80% (ETA: 15:15:34) 0.3619g/s 846817p/s 846817c/s
360394KC/s 11113D4..1CJ13D4
200g 0:00:09:00 35.77% (ETA: 15:15:35) 0.3698g/s 846839p/s 846839c/s
350919KC/s 11112BD..1CJ12BD
217g 0:00:10:00 39.75% (ETA: 15:15:35) 0.3611g/s 846828p/s 846828c/s
341515KC/s 11111JD..1CJ11JD
233g 0:00:11:00 43.73% (ETA: 15:15:35) 0.3525g/s 846793p/s 846793c/s
332635KC/s 40F3885..1CJ1085
251g 0:00:12:01 47.70% (ETA: 15:15:36) 0.3480g/s 846706p/s 846706c/s
323562KC/s 111196E..1CJ196E
272g 0:00:13:01 51.67% (ETA: 15:15:36) 0.3481g/s 846729p/s 846729c/s
315015KC/s 1111846..1CJ1846
299g 0:00:14:00 55.58% (ETA: 15:15:36) 0.3558g/s 846695p/s 846695c/s
306346KC/s FH8JA2F..1CJ142F
322g 0:00:15:00 59.55% (ETA: 15:15:36) 0.3576g/s 846679p/s 846679c/s
297325KC/s 111130F..1CJ130F
343g 0:00:16:00 63.52% (ETA: 15:15:36) 0.3571g/s 846656p/s 846656c/s
288287KC/s 1111287..1CJ1287
363g 0:00:17:00 67.50% (ETA: 15:15:36) 0.3556g/s 846594p/s 846594c/s
279286KC/s 08209EG..1CJ116G
383g 0:00:18:00 71.47% (ETA: 15:15:36) 0.3543g/s 846554p/s 846554c/s
270309KC/s EB1H8C8..1CJ10C8
397g 0:00:19:00 75.45% (ETA: 15:15:36) 0.3479g/s 846504p/s 846504c/s
261557KC/s 11119AH..1CJ19AH
SN 18: Timeout.
408g 0:00:20:55 78.38% (ETA: 15:17:07) 0.3248g/s 798808p/s 798808c/s
240871KC/s D1B5EGH..1CJ16GH
408g 0:00:21:00 78.60% (ETA: 15:17:09) 0.3235g/s 797906p/s 797906c/s
240153KC/s 111158H..1CJ158H
Found 1 device(s) ZTEX 1.15y
SN: 18 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:69
SN 12: Timeout.
423g 0:00:23:03 81.83% (ETA: 15:18:36) 0.3056g/s 756828p/s 756828c/s
221626KC/s 11114D9..1CJ14D9
Found 1 device(s) ZTEX 1.15y
SN: 12 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:66
442g 0:00:24:00 85.42% (ETA: 15:18:30) 0.3068g/s 759111p/s 759111c/s
215480KC/s E7I2EAI..1CJ18AI
SN 15: Timeout.
445g 0:00:25:20 86.10% (ETA: 15:19:51) 0.2925g/s 724637p/s 724637c/s
204524KC/s 111153I..1CJ153I
Found 1 device(s) ZTEX 1.15y
SN: 15 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:65
456g 0:00:26:00 88.65% (ETA: 15:19:45) 0.2921g/s 726946p/s 726946c/s
200557KC/s 111178I..1CJ178I
475g 0:00:27:00 92.62% (ETA: 15:19:34) 0.2930g/s 731404p/s 731404c/s
194640KC/s 1111660..1CJ1660
493g 0:00:28:01 96.60% (ETA: 15:19:25) 0.2932g/s 735535p/s 735535c/s
188386KC/s 111154J..1CJ154J
512g 0:00:28:50 99.90% (ETA: 15:19:17) 0.2957g/s 738755p/s 738755c/s
183335KC/s 4I4B4JJ..1CJ14JJ
Session completed

I'm not confident in making any thermal conclusions. I am using a
laser-pointer-style non-contact thermal probe, and while I believe it to be
accurate, I can only perform ad-hoc manual checks of specific boards and
FPGAs. I wasn't able to detect excessive temperatures for the boards that
timed out. But this is less scientific and less reliable than if thermal
information was directly available as part of ZTEX support, so I don't
think I can conclude anything solid there.

For further testing, being able to specify frequency on a per-board basis,
as is possible with other ZTEX algorithms, would be useful.

Also, here is hashcat (recent GitHub) working on the same 512 same-salt
hashes, to show hashcat's real-world performance:

$ hashcat -w 4 -O -m 1800 pw-sha512crypt.samesalt.len7 -a 3 -2
1A2B3C4D5E6F7G8H9I0J ?2?2?2?2?2?2?2
hashcat (v5.1.0-904-g27f130ea) starting...

OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 1080, 2029/8119 MB allocatable, 20MCU
* Device #2: GeForce GTX 1080, 2029/8119 MB allocatable, 20MCU
* Device #3: GeForce GTX 1080, 2029/8119 MB allocatable, 20MCU
* Device #4: GeForce GTX 1080, 2029/8119 MB allocatable, 20MCU
* Device #5: GeForce GTX 1080, 2029/8119 MB allocatable, 20MCU
* Device #6: GeForce GTX 1080, 2029/8119 MB allocatable, 20MCU

OpenCL Platform #2: Advanced Micro Devices, Inc.
================================================
* Device #7: AMD FX(tm)-8350 Eight-Core Processor, skipped.

Hashes: 512 digests; 512 unique digests, 1 unique salts
Bitmaps: 16 bits, 65536 entries, 0x0000ffff mask, 262144 bytes, 5/13 rotates

Applicable optimizers:
* Optimized-Kernel
* Zero-Byte
* Single-Salt
* Brute-Force
* Uses-64-Bit

Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 15

Watchdog: Temperature abort trigger set to 90c

$6$singlesalt$AZFUKYFb.7W54vmVThHRK2PW/PyJNW6SU0TekhnLhAzhUXd7cEi01cg0HylaO.V3Qu5n3Cjxf8pKD1aOGJ9wt1:1DBI2IA
$6$singlesalt$qzEd.zyMktl3E62gUYA/Z69kvTiyUyTaXM/GHAiqhKp1/YWq.xW8kTAXxnre88CcNIIy7A052LNoLQ6ktQXPo/:1DDB577
$6$singlesalt$NdlemsqYST/m4dvZN3bYuLyPn6AN2v3ESiOOCQvQv2ati3f66xv0LPJ2Z/dpV5ro68Uyiq9D5KP3AfSnBwxgL/:13CA0DA
$6$singlesalt$CS./2dhXomg9ibWtYwVhaL7NTl48fJsn99YBHzhUMvxTNzzrCl7tcRRRaw.fZyzz5cOmLY6B/74rxNZFDOUJE/:07J30IA
[s]tatus [p]ause [b]ypass [c]heckpoint [q]uit =>

Session..........: hashcat
Status...........: Running
Hash.Name........: sha512crypt $6$, SHA512 (Unix)
Hash.Target......: pw-sha512crypt.samesalt.len7
Time.Started.....: Sat Apr 13 23:56:43 2019 (12 secs)
Time.Estimated...: Sun Apr 14 00:20:34 2019 (23 mins, 39 secs)
Guess.Mask.......: ?2?2?2?2?2?2?2 [7]
Guess.Charset....: -1 Undefined, -2 1A2B3C4D5E6F7G8H9I0J, -3 Undefined, -4
Undefined
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:   150.1 kH/s (433.13ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#2.........:   148.6 kH/s (437.90ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#3.........:   148.9 kH/s (436.88ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#4.........:   148.7 kH/s (438.03ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#5.........:   150.2 kH/s (433.02ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#6.........:   149.6 kH/s (435.06ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#*.........:   896.0 kH/s
Recovered........: 4/512 (0.78%) Digests, 0/1 (0.00%) Salts
Progress.........: 7864320/1280000000 (0.61%)
Rejected.........: 0/7864320 (0.00%)
Restore.Point....: 0/64000000 (0.00%)
Restore.Sub.#1...: Salt:0 Amplifier:2-3 Iteration:3584-4096
Restore.Sub.#2...: Salt:0 Amplifier:2-3 Iteration:3584-4096
Restore.Sub.#3...: Salt:0 Amplifier:2-3 Iteration:3584-4096
Restore.Sub.#4...: Salt:0 Amplifier:2-3 Iteration:3584-4096
Restore.Sub.#5...: Salt:0 Amplifier:2-3 Iteration:3584-4096
Restore.Sub.#6...: Salt:0 Amplifier:2-3 Iteration:3584-4096
Candidates.#1....: 2234567 -> 2FD6852
Candidates.#2....: 227GACA -> 2F5EB31
Candidates.#3....: 22H8043 -> 2FI55CA
Candidates.#4....: 225H2CA -> 2FBG2JA
Candidates.#5....: 22DJ2JA -> 2F6A001
Candidates.#6....: 223JDAD -> 2FD2BBA
Hardware.Mon.#1..: Temp: 47c Fan: 80% Util:100% Core:1797MHz Mem:4513MHz
Bus:8
Hardware.Mon.#2..: Temp: 43c Fan: 80% Util:100% Core:1771MHz Mem:4513MHz
Bus:4
Hardware.Mon.#3..: Temp: 54c Fan: 80% Util:100% Core:1759MHz Mem:4513MHz
Bus:16
Hardware.Mon.#4..: Temp: 50c Fan: 80% Util:100% Core:1771MHz Mem:4513MHz
Bus:4
Hardware.Mon.#5..: Temp: 44c Fan: 80% Util:100% Core:1784MHz Mem:4513MHz
Bus:1
Hardware.Mon.#6..: Temp: 48c Fan: 80% Util:100% Core:1784MHz Mem:4513MHz
Bus:1

$6$singlesalt$vi6GhkonVa1K02RE2LYUPJdRvn6MLoW3qIPY0ZBAtBHvwUWoLMtXKTX.hIixGmGUdWiAy2UQAE897oukJpmjn/:2FJI977
$6$singlesalt$5WeOV2M67XrLnZaHLw3.E2eBUnJU58MEjrSVq90QAb5MiqB9b.4dyguywB0dK/fVYONFdcupRkKbj816zt5.h0:3187619
$6$singlesalt$7H78M6/.R8UrXZYbHtUzHDKNJzCZRCH/roEAWa8Ua9Ce0/6qB2vQulpPziYuhCYJ0oQtmzG4wiiCQvEy4vC011:3H5CJBE
[snip]
$6$singlesalt$18oQ7.obAhmzxywXO5r08SuZRyRjS1e7rJEB8Gz/rEageJsCyycAUXpUqeVLkLS4h8Ijz0e30POsBE9Vjzvu7.:7F85133
$6$singlesalt$VRmzSKKV4UyS/GrHkkQO4sIN7SnTWQcxeCI24yiO0/aTt0WQkLYz1IRDuwhcooxA3LPE6zEWQk5dDXVK8Ltet0:79I26FG
$6$singlesalt$0PBmQrC5OfdhxChQzdyFdSiOhY4b1bpvDhU7KQUyEhajb6iETLFQAzNZVovjbKNuMEKiFeChWTfhaP6S5WAbk.:64A4724
[s]tatus [p]ause [b]ypass [c]heckpoint [q]uit =>

[snip]
Time.Started.....: Sat Apr 13 23:56:43 2019 (5 mins, 13 secs)
Time.Estimated...: Sun Apr 14 00:21:01 2019 (19 mins, 5 secs)
Guess.Mask.......: ?2?2?2?2?2?2?2 [7]
Guess.Charset....: -1 Undefined, -2 1A2B3C4D5E6F7G8H9I0J, -3 Undefined, -4
Undefined
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:   147.3 kH/s (442.10ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#2.........:   145.2 kH/s (448.94ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#3.........:   146.3 kH/s (445.25ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#4.........:   145.9 kH/s (445.09ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#5.........:   147.0 kH/s (443.06ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#6.........:   147.2 kH/s (441.45ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#*.........:   879.0 kH/s
Recovered........: 108/512 (21.09%) Digests, 0/1 (0.00%) Salts
Progress.........: 273285120/1280000000 (21.35%)
Rejected.........: 0/273285120 (0.00%)
Restore.Point....: 8519680/64000000 (13.31%)
Restore.Sub.#1...: Salt:0 Amplifier:10-11 Iteration:1536-2048
Restore.Sub.#2...: Salt:0 Amplifier:9-10 Iteration:1536-2048
Restore.Sub.#3...: Salt:0 Amplifier:9-10 Iteration:4096-4608
Restore.Sub.#4...: Salt:0 Amplifier:9-10 Iteration:3072-3584
Restore.Sub.#5...: Salt:0 Amplifier:10-11 Iteration:512-1024
Restore.Sub.#6...: Salt:0 Amplifier:10-11 Iteration:1024-1536
Candidates.#1....: B25C7JI -> BFB3G70
Candidates.#2....: 62562H0 -> 6FBB2ED
Candidates.#3....: 6274533 -> 6F502BB
Candidates.#4....: 62H22BB -> 6FIE2H0
Candidates.#5....: B238HED -> BFDBEIF
Candidates.#6....: B2DCG70 -> BF60FED
Hardware.Mon.#1..: Temp: 69c Fan: 80% Util:100% Core:1746MHz Mem:4513MHz
Bus:8
Hardware.Mon.#2..: Temp: 75c Fan: 80% Util:100% Core:1708MHz Mem:4513MHz
Bus:4
Hardware.Mon.#3..: Temp: 75c Fan: 80% Util:100% Core:1733MHz Mem:4513MHz
Bus:16
Hardware.Mon.#4..: Temp: 70c Fan: 80% Util:100% Core:1708MHz Mem:4513MHz
Bus:4
Hardware.Mon.#5..: Temp: 71c Fan: 80% Util:100% Core:1733MHz Mem:4513MHz
Bus:1
Hardware.Mon.#6..: Temp: 71c Fan: 80% Util:100% Core:1733MHz Mem:4513MHz
Bus:1

$6$singlesalt$jvYHRjzrVtnAgoD158DxccrcqC/xlhmNl4H9BhZgZbX/CrURg2e4XxsJx3FHJ/oYVHc1abDc64loqRQLv7I8g/:BHGBF50
$6$singlesalt$DkIDTMlzWMoZWl/65/prUXzjcVOGFp79b5ZiyzXTe3RE9Wq/.jMAXN6w/6kPJuPKJJEYJuPEV2phZcI3AtFb1/:AHBGIC1
$6$singlesalt$vtHhGlBfq.mSnxraz9pEluzBwFm7G9Hcr9.26R3LKvKI8NvKJCYeIvWh7ou5kzIXwoBaG8jylCNOegqpQJE8i.:ABA0633
[snip]
$6$singlesalt$i/MVNNtGC63KDnHS2zqNjKlHigIo.uiUb6JJHodF9deMtxHgNY2zeDanP4R6M8DoGbkb4N7txFRu1CmXgTWrK1:BI6H7CG
$6$singlesalt$TPuVgewzKNQlp7VVX07JjHH0K5LwgI/J89PW1JAeCAwSGnZm4pJMJpmumcy8LpGW66du2HFnRsRrvbzt8GW.50:B424G8I
$6$singlesalt$Diifj9mueAXIB0Wb.Uj2uJwD49xhnoL2QTw238sVOkONE11yfDverbEnJzdlRTME9BHssm3n10HincxG9l864/:I5B60GJ

Session..........: hashcat
Status...........: Cracked
Hash.Name........: sha512crypt $6$, SHA512 (Unix)
Hash.Target......: pw-sha512crypt.samesalt.len7
Time.Started.....: Sat Apr 13 23:56:43 2019 (25 mins, 20 secs)
Time.Estimated...: Sun Apr 14 00:22:03 2019 (0 secs)
Guess.Mask.......: ?2?2?2?2?2?2?2 [7]
Guess.Charset....: -1 Undefined, -2 1A2B3C4D5E6F7G8H9I0J, -3 Undefined, -4
Undefined
Guess.Queue......: 1/1 (100.00%)
Speed.#1.........:   145.8 kH/s (420.95ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#2.........:   143.4 kH/s (430.02ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#3.........:   145.2 kH/s (422.55ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#4.........:   145.2 kH/s (420.68ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#5.........:   145.0 kH/s (423.30ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#6.........:   145.7 kH/s (419.91ms) @ Accel:1024 Loops:512 Thr:32
Vec:1
Speed.#*.........:   870.2 kH/s
Recovered........: 512/512 (100.00%) Digests, 1/1 (100.00%) Salts
Progress.........: 1278764376/1280000000 (99.90%)
Rejected.........: 0/1278764376 (0.00%)
Restore.Point....: 59637760/64000000 (93.18%)
Restore.Sub.#1...: Salt:0 Amplifier:19-20 Iteration:0-512
Restore.Sub.#2...: Salt:0 Amplifier:19-20 Iteration:4608-5000
Restore.Sub.#3...: Salt:0 Amplifier:19-20 Iteration:4608-5000
Restore.Sub.#4...: Salt:0 Amplifier:19-20 Iteration:4608-5000
Restore.Sub.#5...: Salt:0 Amplifier:19-20 Iteration:4608-5000
Restore.Sub.#6...: Salt:0 Amplifier:18-19 Iteration:4608-5000
Candidates.#1....: ED9BHDH -> E76IC8I
Candidates.#2....: E82868I -> EB9BHDH
Candidates.#3....: ECI6BAJ -> E3EAJ1I
Candidates.#4....: E2H4G5H -> EH3HDAJ
Candidates.#5....: E6FAJ1I -> E17474I
Candidates.#6....: IAA89EH -> IF6G6HF
Hardware.Mon.#1..: Temp: 75c Fan: 80% Util:100% Core:1733MHz Mem:4513MHz
Bus:8
Hardware.Mon.#2..: Temp: 55c Fan: 80% Util:  0% Core:1607MHz Mem:4513MHz
Bus:4
Hardware.Mon.#3..: Temp: 50c Fan: 80% Util:  0% Core:1607MHz Mem:4513MHz
Bus:16
Hardware.Mon.#4..: Temp: 44c Fan: 80% Util:  0% Core:1607MHz Mem:4513MHz
Bus:4
Hardware.Mon.#5..: Temp: 49c Fan: 80% Util:  0% Core:1607MHz Mem:4513MHz
Bus:1
Hardware.Mon.#6..: Temp: 74c Fan: 80% Util: 52% Core:1809MHz Mem:4513MHz
Bus:1

Started: Sat Apr 13 23:56:33 2019
Stopped: Sun Apr 14 00:22:04 2019

Royce


#-----------------------------------------------------------------------------

$ ./john -2='1A2B3C4D5E6F7G8H9I0J' --mask='?2?2?2?2?2?2?2'
--format=sha512crypt-ztex --verbosity=1 --progress-every=60
pw-sha512crypt.samesalt.len7
ZTEX 10 bus:1 dev:122 Frequency:160 160 160 160
ZTEX 11 bus:1 dev:118 Frequency:160 160 160 160
ZTEX 12 bus:1 dev:113 Frequency:160 160 160 160
ZTEX 13 bus:1 dev:123 Frequency:160 160 160 160
ZTEX 14 bus:1 dev:119 Frequency:160 160 160 160
ZTEX 15 bus:1 dev:114 Frequency:160 160 160 160
ZTEX 16 bus:1 dev:111 Frequency:160 160 160 160
ZTEX 17 bus:1 dev:126 Frequency:160 160 160 160
ZTEX 18 bus:1 dev:117 Frequency:160 160 160 160
ZTEX 19 bus:1 dev:112 Frequency:160 160 160 160
ZTEX 20 bus:1 dev:121 Frequency:160 160 160 160
ZTEX 21 bus:1 dev:116 Frequency:160 160 160 160
ZTEX 22 bus:1 dev:110 Frequency:160 160 160 160
ZTEX 23 bus:1 dev:120 Frequency:160 160 160 160
ZTEX 24 bus:1 dev:115 Frequency:160 160 160 160
ZTEX 25 bus:1 dev:109 Frequency:160 160 160 160
Using default input encoding: UTF-8
Loaded 512 password hashes with no different salts (sha512crypt-ztex,
crypt(3) $6$ [sha512crypt ZTEX])

SN 15: Timeout.
Press 'q' or Ctrl-C to abort, almost any other key for status
1g 0:00:00:01 0.15% (ETA: 06:19:24) 0.5154g/s 989690p/s 989690c/s
506721KC/s 6J6BD11..1CJ1711
Found 1 device(s) ZTEX 1.15y
SN: 15 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:114
27g 0:00:01:00 4.72% (ETA: 06:29:27) 0.4432g/s 992777p/s 992777c/s
501968KC/s 1111001..1CJ1001
60g 0:00:02:00 9.38% (ETA: 06:29:38) 0.4968g/s 993706p/s 993706c/s
485368KC/s 11116IA..1CJ16IA
81g 0:00:03:00 14.03% (ETA: 06:29:41) 0.4485g/s 994185p/s 994185c/s
469888KC/s 2C2E9H2..1CJ1292
97g 0:00:04:00 18.68% (ETA: 06:29:43) 0.4036g/s 994839p/s 994839c/s
456996KC/s 111188B..1CJ188B
122g 0:00:05:00 23.32% (ETA: 06:29:43) 0.4065g/s 994802p/s 994802c/s
445657KC/s A4E93G3..1CJ14G3
152g 0:00:06:00 28.05% (ETA: 06:29:41) 0.4211g/s 994901p/s 994901c/s
434090KC/s 111137C..1CJ137C
SN 10: Timeout.
159g 0:00:07:27 29.32% (ETA: 06:33:42) 0.3551g/s 838493p/s 838493c/s
362587KC/s 11114IC..1CJ14IC
Found 1 device(s) ZTEX 1.15y
SN: 10 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:122
SN 16: Timeout.
170g 0:00:09:01 31.12% (ETA: 06:37:15) 0.3141g/s 736264p/s 736264c/s
314337KC/s 1111634..1CJ1634
Found 1 device(s) ZTEX 1.15y
SN: 16 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:111
SN 14: Timeout.
192g 0:00:10:54 34.42% (ETA: 06:39:56) 0.2935g/s 673627p/s 673627c/s
281410KC/s 12JD7I4..1CJ18I4
Found 1 device(s) ZTEX 1.15y
SN: 14 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:119
197g 0:00:11:00 34.95% (ETA: 06:39:46) 0.2980g/s 676915p/s 676915c/s
282094KC/s 752HHJ4..1CJ19J4
217g 0:00:12:00 39.60% (ETA: 06:38:36) 0.3010g/s 703169p/s 703169c/s
283809KC/s 111150D..1CJ150D
237g 0:00:13:00 44.25% (ETA: 06:37:40) 0.3035g/s 725465p/s 725465c/s
283842KC/s 11111I5..1CJ11I5
258g 0:00:14:00 48.90% (ETA: 06:36:55) 0.3069g/s 744646p/s 744646c/s
282441KC/s 6CCAFHE..1CJ17HE
SN 17: Timeout.
263g 0:00:15:27 50.17% (ETA: 06:39:04) 0.2836g/s 692725p/s 692725c/s
260356KC/s 1111816..1CJ1816
Found 1 device(s) ZTEX 1.15y
SN: 17 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:126
279g 0:00:16:00 52.80% (ETA: 06:38:36) 0.2903g/s 703274p/s 703274c/s
259814KC/s 11113F6..1CJ13F6
SN 12: Timeout.
300g 0:00:17:51 55.95% (ETA: 06:40:12) 0.2799g/s 668277p/s 668277c/s
241223KC/s 11119BF..1CJ19BF
Found 1 device(s) ZTEX 1.15y
SN: 12 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:113
305g 0:00:18:00 56.62% (ETA: 06:40:05) 0.2823g/s 670924p/s 670924c/s
240890KC/s 111164F..1CJ164F
SN 22: Timeout.
309g 0:00:19:15 56.92% (ETA: 06:42:05) 0.2675g/s 630791p/s 630791c/s
225933KC/s G6717DF..1CJ18DF
Found 1 device(s) ZTEX 1.15y
SN: 22 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:110
326g 0:00:20:00 60.45% (ETA: 06:41:23) 0.2715g/s 644552p/s 644552c/s
224797KC/s 11119A7..1CJ19A7
352g 0:00:21:00 65.10% (ETA: 06:40:33) 0.2792g/s 661102p/s 661102c/s
222303KC/s F2CIC1G..1CJ151G
375g 0:00:22:00 69.75% (ETA: 06:39:50) 0.2840g/s 676199p/s 676199c/s
218928KC/s 11111JG..1CJ11JG
392g 0:00:23:00 74.40% (ETA: 06:39:12) 0.2840g/s 690011p/s 690011c/s
214915KC/s J33D5I8..1CJ17I8
411g 0:00:24:00 79.12% (ETA: 06:38:37) 0.2852g/s 702864p/s 702864c/s
210616KC/s J463D9H..1CJ169H
430g 0:00:25:00 83.78% (ETA: 06:38:08) 0.2865g/s 714484p/s 714484c/s
205758KC/s 11112H9..1CJ12H9
SN 23: Timeout.
435g 0:00:26:26 84.90% (ETA: 06:39:25) 0.2742g/s 685139p/s 685139c/s
195330KC/s 7G3D6J9..1CJ17J9
Found 1 device(s) ZTEX 1.15y
SN: 23 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:120
454g 0:00:27:00 87.60% (ETA: 06:39:07) 0.2800g/s 691746p/s 691746c/s
192658KC/s 6JFDB6I..1CJ156I
472g 0:00:28:00 92.25% (ETA: 06:38:39) 0.2808g/s 702497p/s 702497c/s
187578KC/s FCC3H50..1CJ11E0
494g 0:00:29:00 96.90% (ETA: 06:38:13) 0.2837g/s 712504p/s 712504c/s
182040KC/s 7053DDJ..1CJ17DJ
512g 0:00:29:39 99.90% (ETA: 06:37:58) 0.2877g/s 718624p/s 718624c/s
178285KC/s 4I4B4JJ..1CJ14JJ
Session completed

I am not sure how to calculate reasonable frequencies, so I guessed 150 and
tried again:

$ ./john -2='1A2B3C4D5E6F7G8H9I0J' --mask='?2?2?2?2?2?2'
--format=sha512crypt-ztex --verbosity=1 --progress-every=60
pw-sha512crypt.samesalt.len6
ZTEX 10 bus:1 dev:122 Frequency:150 150 150 150
ZTEX 11 bus:1 dev:118 Frequency:150 150 150 150
ZTEX 12 bus:1 dev:113 Frequency:150 150 150 150
ZTEX 13 bus:1 dev:123 Frequency:150 150 150 150
ZTEX 14 bus:1 dev:119 Frequency:150 150 150 150
ZTEX 15 bus:1 dev:114 Frequency:150 150 150 150
ZTEX 16 bus:1 dev:111 Frequency:150 150 150 150
ZTEX 17 bus:1 dev:126 Frequency:150 150 150 150
ZTEX 18 bus:1 dev:117 Frequency:150 150 150 150
ZTEX 19 bus:1 dev:112 Frequency:150 150 150 150
ZTEX 20 bus:1 dev:121 Frequency:150 150 150 150
ZTEX 21 bus:1 dev:116 Frequency:150 150 150 150
ZTEX 22 bus:1 dev:110 Frequency:150 150 150 150
ZTEX 23 bus:1 dev:120 Frequency:150 150 150 150
ZTEX 24 bus:1 dev:115 Frequency:150 150 150 150
ZTEX 25 bus:1 dev:109 Frequency:150 150 150 150
Using default input encoding: UTF-8
Loaded 512 password hashes with no different salts (sha512crypt-ztex,
crypt(3) $6$ [sha512crypt ZTEX])
Press 'q' or Ctrl-C to abort, almost any other key for status
66g 0:00:00:08 12.80% (ETA: 06:40:44) 8.000g/s 992969p/s 992969c/s
478859KC/s FA6JE2..14D3F2
237g 0:00:00:29 46.40% (ETA: 06:40:44) 7.937g/s 994507p/s 994507c/s
401337KC/s 72983E..14D7CE
482g 0:00:01:00 94.40% (ETA: 06:40:45) 7.931g/s 994174p/s 994174c/s
272930KC/s I11DI0..14D7I0
510g 0:00:01:03 99.20% (ETA: 06:40:45) 7.984g/s 994019p/s 994019c/s
260941KC/s I0A69J..1BB99J
Session completed

But even that was not reliable for all boards for longer periods of time
(though it was better):

$ ./john -2='1A2B3C4D5E6F7G8H9I0J' --mask='?2?2?2?2?2?2?2'
--format=sha512crypt-ztex --verbosity=1 --progress-every=60
pw-sha512crypt.samesalt.len7
ZTEX 10 bus:1 dev:122 Frequency:150 150 150 150
ZTEX 11 bus:1 dev:118 Frequency:150 150 150 150
ZTEX 12 bus:1 dev:113 Frequency:150 150 150 150
ZTEX 13 bus:1 dev:123 Frequency:150 150 150 150
ZTEX 14 bus:1 dev:119 Frequency:150 150 150 150
ZTEX 15 bus:1 dev:114 Frequency:150 150 150 150
ZTEX 16 bus:1 dev:111 Frequency:150 150 150 150
ZTEX 17 bus:1 dev:126 Frequency:150 150 150 150
ZTEX 18 bus:1 dev:117 Frequency:150 150 150 150
ZTEX 19 bus:1 dev:112 Frequency:150 150 150 150
ZTEX 20 bus:1 dev:121 Frequency:150 150 150 150
ZTEX 21 bus:1 dev:116 Frequency:150 150 150 150
ZTEX 22 bus:1 dev:110 Frequency:150 150 150 150
ZTEX 23 bus:1 dev:120 Frequency:150 150 150 150
ZTEX 24 bus:1 dev:115 Frequency:150 150 150 150
ZTEX 25 bus:1 dev:109 Frequency:150 150 150 150
Using default input encoding: UTF-8
Loaded 512 password hashes with no different salts (sha512crypt-ztex,
crypt(3) $6$ [sha512crypt ZTEX])
Press 'q' or Ctrl-C to abort, almost any other key for status
27g 0:00:01:00 4.72% (ETA: 07:06:50) 0.4445g/s 994665p/s 994665c/s
501486KC/s 1117I01..14D7I01
59g 0:00:02:00 9.28% (ETA: 07:07:11) 0.4911g/s 988877p/s 988877c/s
480793KC/s EE3699A..14D52IA
81g 0:00:03:00 14.00% (ETA: 07:07:04) 0.4477g/s 990547p/s 990547c/s
469139KC/s 2C2E9H2..14D1192
97g 0:00:04:00 18.64% (ETA: 07:07:06) 0.4029g/s 991159p/s 991159c/s
456234KC/s 48EDD8B..14D3F8B
121g 0:00:05:00 23.28% (ETA: 07:07:06) 0.4026g/s 991495p/s 991495c/s
444921KC/s 11152G3..14D52G3
152g 0:00:06:00 27.92% (ETA: 07:07:07) 0.4219g/s 991967p/s 991967c/s
432440KC/s 1117GFC..14D7GFC
180g 0:00:07:01 32.64% (ETA: 07:07:07) 0.4274g/s 992215p/s 992215c/s
419465KC/s 1113F64..14D3F64
SN 18: Timeout.
206g 0:00:09:03 36.64% (ETA: 07:10:20) 0.3789g/s 862752p/s 862752c/s
355307KC/s G5H844D..14D3F4D
Found 1 device(s) ZTEX 1.15y
SN: 18 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:117
222g 0:00:10:00 40.88% (ETA: 07:10:05) 0.3698g/s 871830p/s 871830c/s
348567KC/s 11156B5..14D56B5
242g 0:00:11:01 45.60% (ETA: 07:09:47) 0.3660g/s 882918p/s 882918c/s
342095KC/s 111152E..14D152E
263g 0:00:12:00 50.24% (ETA: 07:09:32) 0.3648g/s 892028p/s 892028c/s
335500KC/s 1113J16..14D3J16
294g 0:00:13:00 54.88% (ETA: 07:09:20) 0.3766g/s 899868p/s 899868c/s
327451KC/s B3D8EJ6..14D56J6
322g 0:00:14:00 59.52% (ETA: 07:09:09) 0.3831g/s 906518p/s 906518c/s
318479KC/s 1117A0F..14D7A0F
345g 0:00:15:00 64.16% (ETA: 07:09:00) 0.3832g/s 912264p/s 912264c/s
309031KC/s 1119797..14D9797
371g 0:00:16:01 68.88% (ETA: 07:08:53) 0.3860g/s 917406p/s 917406c/s
299104KC/s 0CJ25HG..14D56HG
390g 0:00:17:00 73.52% (ETA: 07:08:46) 0.3820g/s 921817p/s 921817c/s
289425KC/s 1117A88..14D7A88
SN 15: Timeout.
400g 0:00:18:46 76.24% (ETA: 07:10:15) 0.3550g/s 866217p/s 866217c/s
265834KC/s 769JI3H..14D3J3H
Found 1 device(s) ZTEX 1.15y
SN: 15 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:114
403g 0:00:19:00 77.12% (ETA: 07:10:17) 0.3532g/s 865278p/s 865278c/s
263657KC/s 1117E5H..14D7E5H
423g 0:00:20:00 81.76% (ETA: 07:10:06) 0.3523g/s 871670p/s 871670c/s
255363KC/s 11191D9..14D91D9
445g 0:00:21:00 86.40% (ETA: 07:09:56) 0.3530g/s 877449p/s 877449c/s
246932KC/s 11117CI..14D17CI
464g 0:00:22:00 91.04% (ETA: 07:09:47) 0.3514g/s 882738p/s 882738c/s
238221KC/s 1113B30..14D3B30
491g 0:00:23:00 95.76% (ETA: 07:09:40) 0.3555g/s 887578p/s 887578c/s
229322KC/s 11191BJ..14D91BJ
SN 22: Timeout.
508g 0:00:24:57 99.36% (ETA: 07:10:45) 0.3392g/s 849236p/s 849236c/s
211861KC/s 11195IJ..14D95IJ
510g 0:00:25:00 99.52% (ETA: 07:10:46) 0.3398g/s 848886p/s 848886c/s
211442KC/s EC1CIIJ..14D7A0J
512g 0:00:25:06 99.84% (ETA: 07:10:47) 0.3398g/s 848218p/s 848218c/s
210604KC/s 4I4B4JJ..14D91JJ
Session completed

And at 140:

$ ./john -2='1A2B3C4D5E6F7G8H9I0J' --mask='?2?2?2?2?2?2?2'
--format=sha512crypt-ztex --verbosity=1 --progress-every=60
pw-sha512crypt.samesalt.len7
ZTEX 10 bus:1 dev:122 Frequency:140 140 140 140
ZTEX 11 bus:1 dev:118 Frequency:140 140 140 140
ZTEX 12 bus:1 dev:113 Frequency:140 140 140 140
ZTEX 13 bus:1 dev:123 Frequency:140 140 140 140
ZTEX 14 bus:1 dev:119 Frequency:140 140 140 140
ZTEX 15 bus:1 dev:114 Frequency:140 140 140 140
ZTEX 16 bus:1 dev:111 Frequency:140 140 140 140
ZTEX 17 bus:1 dev:126 Frequency:140 140 140 140
ZTEX 18 bus:1 dev:117 Frequency:140 140 140 140
ZTEX 19 bus:1 dev:112 Frequency:140 140 140 140
ZTEX 20 bus:1 dev:121 Frequency:140 140 140 140
ZTEX 21 bus:1 dev:116 Frequency:140 140 140 140
ZTEX 22 bus:1 dev:110 Frequency:140 140 140 140
ZTEX 23 bus:1 dev:120 Frequency:140 140 140 140
ZTEX 24 bus:1 dev:115 Frequency:140 140 140 140
ZTEX 25 bus:1 dev:109 Frequency:140 140 140 140
Using default input encoding: UTF-8
Loaded 512 password hashes with no different salts (sha512crypt-ztex,
crypt(3) $6$ [sha512crypt ZTEX])
Press 'q' or Ctrl-C to abort, almost any other key for status
26g 0:00:01:00 4.40% (ETA: 07:47:07) 0.4303g/s 932141p/s 932141c/s
468343KC/s 11117I1..14D17I1
53g 0:00:02:00 8.80% (ETA: 07:47:07) 0.4384g/s 931833p/s 931833c/s
457378KC/s 4J1A2HA..14D13HA
78g 0:00:03:00 13.12% (ETA: 07:47:14) 0.4330g/s 932407p/s 932407c/s
441998KC/s 1117E72..14D7E72
94g 0:00:04:00 17.52% (ETA: 07:47:13) 0.3908g/s 932534p/s 932534c/s
431300KC/s 1117A6B..14D7A6B
SN 14: Timeout.
102g 0:00:05:36 19.36% (ETA: 07:53:19) 0.3033g/s 736953p/s 736953c/s
337222KC/s 18J43IB..14D95IB
Found 1 device(s) ZTEX 1.15y
SN: 14 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:119
108g 0:00:06:00 21.04% (ETA: 07:52:55) 0.2997g/s 747424p/s 747424c/s
339032KC/s 7F85133..14D3B33
138g 0:00:07:00 25.44% (ETA: 07:51:54) 0.3280g/s 774116p/s 774116c/s
342879KC/s B14J8AC..14D3HAC
163g 0:00:08:01 29.84% (ETA: 07:51:14) 0.3388g/s 794029p/s 794029c/s
341773KC/s 1113DJC..14D3DJC
189g 0:00:09:00 34.16% (ETA: 07:50:44) 0.3498g/s 809358p/s 809358c/s
338801KC/s 1119794..14D9794
211g 0:00:10:00 38.56% (ETA: 07:50:20) 0.3513g/s 821832p/s 821832c/s
333991KC/s 111938D..14D938D
230g 0:00:11:00 42.96% (ETA: 07:50:00) 0.3479g/s 831915p/s 831915c/s
328469KC/s 11199F5..14D99F5
SN 22: Timeout.
244g 0:00:12:57 46.32% (ETA: 07:52:21) 0.3139g/s 762822p/s 762822c/s
294216KC/s 1117CCE..14D7CCE
244g 0:00:13:00 46.48% (ETA: 07:52:22) 0.3126g/s 762269p/s 762269c/s
293788KC/s 11150CE..14D50CE
Found 1 device(s) ZTEX 1.15y
SN: 22 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:110
SN 11: Timeout.
245g 0:00:14:15 46.72% (ETA: 07:54:54) 0.2864g/s 699237p/s 699237c/s
268977KC/s 1117I4E..14D7I4E
Found 1 device(s) ZTEX 1.15y
SN: 11 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:118
263g 0:00:15:01 49.84% (ETA: 07:54:30) 0.2918g/s 708001p/s 708001c/s
266687KC/s F902BJE..14D3DJE
290g 0:00:16:00 54.16% (ETA: 07:53:56) 0.3019g/s 721892p/s 721892c/s
263941KC/s B413E96..14D9796
315g 0:00:17:00 58.56% (ETA: 07:53:25) 0.3086g/s 734395p/s 734395c/s
259942KC/s 111938F..14D938F
340g 0:00:18:01 62.96% (ETA: 07:52:59) 0.3145g/s 745460p/s 745460c/s
254885KC/s I9CAGF7..14D99F7
SN 16: Timeout.
362g 0:00:20:08 67.12% (ETA: 07:54:23) 0.2996g/s 711069p/s 711069c/s
235223KC/s 1117E5G..14D7E5G
Found 1 device(s) ZTEX 1.15y
SN: 16 productId: 10.15.0.0 "inouttraffic JtR 1.8.x" busnum:1 devnum:111
371g 0:00:20:35 69.04% (ETA: 07:54:11) 0.3003g/s 715544p/s 715544c/s
232978KC/s 1113B9G..14D3B9G
Session aborted


#-----------------------------------------------------------------------------
# Mask attack doesn't work, but wordlist attack does

$ rm john.pot

$ cat badsalt.hashes
24EBE20:$6$$g7OTMU70AzLH5YnAmsq3j6GUgFw6LFcT3UDjd1SfuUh9JMEfOH8Atf0S0JEa1rp3n304soNqspy3uQvc0XZQ21
0CB6G88:$6$4$Bb6mDYZOFXdTpFp2GF9cD2xmJHBuIqF86ug01.O0izJSC5ZE5/YO0i6ePeHQ41rpSTlO0FoKF2rE0lbww0U.e.
4FB23GC:$6$74$Nv/2/Db0qvxqZUFz65cZYKPF20TLjJ7EmHbb2AziYjL4sj40yuPIhqV49u8nQLs9cS7zDrEyBIojpIAkUt0ue1
17366HG:$6$085$ImmNlvoccxZkoN5QPW18QMwKTzUB9nrQF7LF4SWm8Af9SqUrdHStYacxBmRklkdJQAZa.AyiUFQuXngAbQxBE/
3ED0AF0:$6$7070$nf99hfeOdxnH.nxjYVk8RZXCvR2kpl78x7vTsNSu.rUDR6bKadUVJ7VQjxZGoB.vVg07Sk5JechYSQ87CK1aB.
8G01A64:$6$42397$3p2vK6fAdXV5IRDQnCXUkodjQeQnNpZCNjfUr6Fmr2jyTix9J2lcPmXyx0NQ7IKXqJVloz9Np3VyKAGiPGzhm1
2JCGD1A:$6$699377$dNE5BreyU.7PDKszP83gZrsomZSGQBLRk7lwnYIJdBNJJLzyjrqQ2NdceVIQbAlPeGQOVElLSOaVroXZgSa1H/
29JI98B:$6$1900768$B.6IhkBPv0iyRZlwnm7AL/A/d4bCXheYDJO6tzTBITWxgoqn5Z4d.ZTTDUwy2BQmo2heIGHD8D8ceDlRwWvy/1

$ cat badsalt.list
24EBE20
0CB6G88
4FB23GC
17366HG
3ED0AF0
8G01A64
2JCGD1A
29JI98B


$ ./john -2='1A2B3C4D5E6F7G8H9I0J' --mask='0CB6G8?2'
--format=sha512crypt-ztex --progress-every=60 badsalt.hashes
Warning: ZTEX: sha512crypt hash with salt_length=0 skipped.
ZTEX 10 bus:1 dev:75 Frequency:135 135 135 135
ZTEX 11 bus:1 dev:71 Frequency:135 135 135 135
ZTEX 12 bus:1 dev:66 Frequency:135 135 135 135
ZTEX 13 bus:1 dev:74 Frequency:135 135 135 135
ZTEX 14 bus:1 dev:70 Frequency:135 135 135 135
ZTEX 15 bus:1 dev:65 Frequency:135 135 135 135
ZTEX 16 bus:1 dev:63 Frequency:135 135 135 135
ZTEX 18 bus:1 dev:69 Frequency:135 135 135 135
ZTEX 19 bus:1 dev:64 Frequency:135 135 135 135
ZTEX 20 bus:1 dev:73 Frequency:135 135 135 135
ZTEX 21 bus:1 dev:68 Frequency:135 135 135 135
ZTEX 22 bus:1 dev:62 Frequency:135 135 135 135
ZTEX 23 bus:1 dev:72 Frequency:135 135 135 135
ZTEX 24 bus:1 dev:67 Frequency:135 135 135 135
ZTEX 25 bus:1 dev:61 Frequency:135 135 135 135
Using default input encoding: UTF-8
Loaded 7 password hashes with 7 different salts (sha512crypt-ztex, crypt(3)
$6$ [sha512crypt ZTEX])
Remaining 6 password hashes with 6 different salts
Cost 1 (iteration count) is 5000 for all loaded hashes
Press 'q' or Ctrl-C to abort, almost any other key for status
0g 0:00:00:00  0g/s 0p/s 0c/s 0C/s
Warning: Only 1 base candidate left, minimum 59880 needed for performance.
Session completed

$ ./john --wordlist='badsalt.list' --format=sha512crypt-ztex
--progress-every=60 badsalt.hashes
Warning: ZTEX: sha512crypt hash with salt_length=0 skipped.
ZTEX 10 bus:1 dev:75 Frequency:135 135 135 135
ZTEX 11 bus:1 dev:71 Frequency:135 135 135 135
ZTEX 12 bus:1 dev:66 Frequency:135 135 135 135
ZTEX 13 bus:1 dev:74 Frequency:135 135 135 135
ZTEX 14 bus:1 dev:70 Frequency:135 135 135 135
ZTEX 15 bus:1 dev:65 Frequency:135 135 135 135
ZTEX 16 bus:1 dev:63 Frequency:135 135 135 135
ZTEX 18 bus:1 dev:69 Frequency:135 135 135 135
ZTEX 19 bus:1 dev:64 Frequency:135 135 135 135
ZTEX 20 bus:1 dev:73 Frequency:135 135 135 135
ZTEX 21 bus:1 dev:68 Frequency:135 135 135 135
ZTEX 22 bus:1 dev:62 Frequency:135 135 135 135
ZTEX 23 bus:1 dev:72 Frequency:135 135 135 135
ZTEX 24 bus:1 dev:67 Frequency:135 135 135 135
ZTEX 25 bus:1 dev:61 Frequency:135 135 135 135
Using default input encoding: UTF-8
Loaded 7 password hashes with 7 different salts (sha512crypt-ztex, crypt(3)
$6$ [sha512crypt ZTEX])
Remaining 6 password hashes with 6 different salts
Cost 1 (iteration count) is 5000 for all loaded hashes
Note: This format may be a lot faster with --mask acceleration (see
doc/MASK).
Warning: Slow communication channel to the device. Increase mask or expect
performance degradation.
Press 'q' or Ctrl-C to abort, almost any other key for status
Warning: Only 8 candidates left, minimum 524288 needed for performance.
4FB23GC          (4FB23GC)
17366HG          (17366HG)
3ED0AF0          (3ED0AF0)
8G01A64          (8G01A64)
2JCGD1A          (2JCGD1A)
29JI98B          (29JI98B)
6g 0:00:00:00 DONE (2019-04-14 14:48) 26.08g/s 34.78p/s 208.6c/s 208.6C/s
29JI98B..29JI98B
Use the "--show" option to display all of the cracked passwords reliably
Session completed
#-----------------------------------------------------------------------------

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.