john-users - Re: how to find a password of 16 digits

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Sun, 28 Jan 2007 10:41:44 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: how to find a password of 16 digits

On Fri, Jan 26, 2007 at 09:41:27PM +0100, Frank Dittrich wrote:
> $[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]$[0-9]
> could work as a set of *MANY* rules to append 10 digits
> to a wordlist of passwords consisting of 6 digits
> (which you could create using incremental mode with
> MinLen = 6 and MaxLen = 6).

Good idea, but:

> But I doubt that John The Ripper was designed to process that many rules.

No, it was not.  It will spend ages verifying the syntax of those rules
before it starts to do anything.  Maybe I need to enhance it to skip the
syntax check when the number of rules is too large (say, more than a
million).

-- 
Alexander Peslyak <solar at openwall.com>
GPG key ID: 5B341F15  fp: B3FB 63F4 D7A3 BCCC 6F6E  FC55 A2FC 027C 5B34 1F15
http://www.openwall.com - bringing security into open computing environments

-- 
To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
to the automated confirmation request that will be sent to you.