[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <4E41BB87.8030602@bredband.net>
Date: Wed, 10 Aug 2011 00:58:15 +0200
From: magnum <rawsmooth@...dband.net>
To: john-dev@...ts.openwall.com
Subject: DES vs 8-bit
This is quoted from last years contest writeup (by Solar):
"Another issue was with DES-based crypt hashes, which process only 7
bits of each character (ignoring the 8th bit). This means that for a
given valid passwords, many variations of it are possible (with the 8th
bit of every character possibly flipped), most of which will not match
those on Kore's list of correct passwords, yet all of them are correct."
Wouldn't it be more logical if JtR itself would strip the 8th bit before
reporting the cracked password? I think this is comparable to LM, where
an input of "foo" will be cracked and reported as "FOO"?
magnum
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
