Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 1 Jun 2023 19:02:48 +0000
From: Thomas Ward <teward@...mas-ward.net>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Subject: RE: "No hashes found" when argon2id is present?

That's a pretty old bug, any timeline on OpenWall's side as to when you'll actually *update* implementation?  When trying to run a breach simulation on a set of password hashes I have which I'm doing white-hat hacking stuff on, the hashes are all argon2id and not having this in John is problematic - using other tools exhaust >= 32GB of memory, which causes issues with attempting to crack it.


Thomas


-----Original Message-----
From: Solar Designer <solar@...nwall.com> 
Sent: Thursday, June 1, 2023 2:56 PM
To: john-users@...ts.openwall.com
Subject: Re: [john-users] "No hashes found" when argon2id is present?

On Thu, Jun 01, 2023 at 12:51:36PM -0400, Thomas Ward wrote:
> I have a file with an `argon2id` hash in it, specifically this one 
> (this is a test hash with 'Passw0rd' as the password, not an actual 
> password) generated from the PyPI `argon2-cffi` library:
> 
> $argon2id$v=19$m=65536,t=4,p=2$w6DmOoIk0tVKDoXEeaYE0ZB9KqZ6Uw$zO3D4nlA
> 9JAS6j/tZGXT0NY0ZzRIPPYLBogo2ObLiLY
> 
> When I try and pass this file to john, it says "no hashes found".  Is 
> john incapable of processing argon2id hashes?

That's correct.  We need to update the Argon2 implementation as part of this issue:

https://github.com/openwall/john/issues/2738

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.