john-users - Re: Incremental Alpha Quagmire

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Mon, 6 Feb 2006 14:33:12 -0800
From: Arias Hung <arias@...-g.net>
To: john-users@...ts.openwall.com
Subject: Re: Incremental Alpha Quagmire

On Mon, 06 Feb 2006, Solar Designer delivered in simple text monotype:

> Oh, and if you're going to be restricting John to 8-character long
> passwords, you really don't want it to consider all characters equally
> probable.  Just do some simple math:
> 
> (52 ** 8) / 86400 / 1000000 / 2 = 309
<---snip--->

Thanks for you continued patience with my questions, I just want to confirm
how you come about with 309 so I can make accurate forecasts of my own in 
the future.

(52 ** 8) <-- Sorry with my unfamiliarity with this notation but i'm assuming 
		this is 52 * 8 * 8 ?

86400 <-- seconds in a day

1,000,000 < --- average combinations/second based on current a hardware bm's

2  < --- ?  Not sure what the division by two is for


Also, where are you factoring in the number of salts 4096 ?



[ CONTENT OF TYPE application/pgp-signature SKIPPED ]