Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <027a01cd555b$7a59e8f0$6f0dbad0$@net>
Date: Thu, 28 Jun 2012 13:26:01 -0500
From: "jfoug" <jfoug@....net>
To: <john-dev@...ts.openwall.com>
Subject: RE: Update to TS (new formats, SHA2, and other changes)

I sent off a fix to magnum.  He may change what I have given him, but it
'shows' what was going on.  I gave him 3 options.  I am not sure which is
the 'best'.

I also gave him a test vector that would have failed.

Failing:

Any password where   len(pw)%4 === 1 or 2   if len(pw)%4==0 or 3, it would
load the ipad/opad properly and work. There were no self test that hit that
congruent 1 or 2 length.

Jim.

>-----Original Message-----
>From: jfoug [mailto:jfoug@....net]
>Sent: Thursday, June 28, 2012 12:23 PM
>To: john-dev@...ts.openwall.com
>Subject: RE: [john-dev] Update to TS (new formats, SHA2, and other
>changes)
>
>The bug 'may' be finding passwords where length(salt)+length(pw) is odd,
>and if built in SSE2 older asm files.  I think it is in code I did, in
>the shammx_reloadinit_nosizeupdate_nofinalbyteswap type stuff.
>
>>It appears that this format may only be finding even length passwords
>>;)
>>
>>> hmac-sha1   ****** NOTE, there may be problems in this format

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.