Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 8 Apr 2006 05:39:14 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: windows passwords now don't work

On Fri, Apr 07, 2006 at 09:03:24AM +0100, Hari Sekhon wrote:
> Are you saying that the lm hash is case insensitive but your password 
> is. If your password is compared to the lm hash then how could it be 
> case sensitive. It must be compared to a case sensitive hash. Are ntlm 
> and lm hashes different, ie the nt one was a next gen hash that enabled 
> case sensitivity?

You're correct - except maybe for the historical aspect of it:

I am unsure whether it is appropriate to say that NTLM hashes are the
"next gen".  They might not have been introduced into Windows NT any
later than LM ones.  They were already in use in NT 4 and most likely
earlier.

I think there are also cases when a provided password is compared
against the target user's LM hash only - but that's not what happens for
local logins.

I am really no Windows expert; I am not even a user.  Maybe someone else
would be able and willing to provide a more elaborate explanation of the
issues involved - what LM hashes are for, etc.

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598  fp: 6429 0D7E F130 C13E C929  6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments

Was I helpful?  Please give your feedback here: http://rate.affero.net/solar

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.