Follow @Openwall on Twitter for new release announcements and other news

John the Ripper Professional copyright and license.

John the Ripper password cracker, Copyright (c) 1996-2015 by Solar Designer. Portions copyright (c) by their respective authors:

The optimized DES S-box expressions (nonstd.c and sboxes.c) have been produced by Matthew Kwan. The corresponding MMX and non-x86-64 SSE2 code (parts of x86-mmx.S and x86-sse.S) is based on Bruce Ford and Rémi Guyomarch's MMX implementation. Some builds of John the Ripper Pro are statically linked against the SHA-1 code from OpenSSL libcrypto, by Eric Young and others.

John the Ripper Professional homepage is:

Provided that you have paid the applicable fee (hereinafter referred to as "the License Fee") as specified on the John the Ripper Professional homepage, this Professional version of John the Ripper (hereinafter referred to as "the Software") is hereby being licensed either for use on any number of computers at one location (office or data center) within one particular organization (one legal entity) or for use on any number of computers by one particular individual, at your option (one-time choice only). The organization or individual of your choice is hereinafter referred to as "the Licensee."

Permission is hereby granted to the Licensee to make copies, modify, and use the Software, in original or modified form, in accordance with the use restrictions set forth above. This license does NOT grant the Licensee permission to redistribute the Software.

The license granted to the Licensee is non-exclusive, non-transferable, and royalty-free. During an initial period of 150 days after payment of the License Fee, the license is automatically revoked if the payment is cancelled or refunded for any reason. If the license is not revoked during the 150 days period, it automatically becomes perpetual and irrevocable.

The Software is provided in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. By using the Software or otherwise accepting this license, the Licensee acknowledges the lack of warranty and additionally agrees to defend, indemnify, and hold harmless the copyright holders from and against any claims, liabilities, damages, and expenses (including reasonable attorneys' fees) arising out of the Licensee's possession, copying, modification, or use of the Software.

Relaxed terms for certain components.

John the Ripper is being developed primarily as an Open Source project. Non-Professional versions of John the Ripper, which Professional versions are based on, are free software available under the terms of the GNU General Public License version 2 "or later" as published by the Free Software Foundation. These versions may be obtained at:

In addition or alternatively to the commercial license above and the GNU GPL, the following components are available to you under even more relaxed terms:

As specified in the corresponding source files (nonstd.c and sboxes.c), Matthew Kwan's DES S-box expressions may be modified, redistributed, and used for any purpose, so long as their origin is acknowledged.

A derived version of the bcrypt (Blowfish-based password hashing) implementation found in John the Ripper has been placed in the public domain. This derived version may be obtained at:

The intent is to provide modern password hashing for your servers and your software (where the GPL restrictions could be a problem).

The NTLM hashes support code (NT_fmt.c and portions of x86-sse.S and x86-64.S as indicated by comments in those source files) have been written by Alain Espinosa and placed in the public domain.

Finally, the CRC-32 implementation found in John (crc32.c and crc32.h) is in the public domain.

Commercial source code reuse licensing.

Commercial source code reuse licenses are available upon request.

Alexander Peslyak aka Solar Designer <solar at>