[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <9b153f299b961b4bcb86de5af4660f27@smtp.hushmail.com>
Date: Fri, 1 Feb 2013 17:58:44 +0100
From: magnum <john.magnum@...hmail.com>
To: john-dev@...ts.openwall.com
Subject: Re: NTLMv1 and MSCHAPv2 (was: NetNTLMv1)
On 1 Feb, 2013, at 11:51 , Solar Designer <solar@...nwall.com> wrote:
> On Fri, Feb 01, 2013 at 07:24:22AM +0400, Solar Designer wrote:
>> Anyhow, I've attached a patch that tries to speedup cmp_all() by use of
>> a bitmap.
>
> There's a bug in that patch: the mem_alloc_tiny() call for bitmap
> allocation should be changed to mem_calloc_tiny().
>
> I initially had a memset() in crypt_all(), but later #if 0'ed it out in
> favor of another approach - but forgot that the bitmap was not zeroized
> in init(). This needs to be corrected (as above).
Fixed. I have also merged the same exploit and SIMD code to MSCHAPv2. That format is very similar - in JtR all main functions are identical except get_salt() so this was very wasy. Actually we should wrap them in the same source file so we don't need to incorporate the same optimizations to both formats in the future.
Jumbo-7 vs. current code:
Benchmarking: MSCHAPv2 C/R MD4 DES [32/64]... DONE
Many salts: 3902K c/s real, 3902K c/s virtual
Only one salt: 2727K c/s real, 2727K c/s virtual
Benchmarking: MSCHAPv2 C/R MD4 DES [128/128 SSE2 intrinsics 12x]... DONE
Many salts: 1068M c/s real, 1068M c/s virtual
Only one salt: 39541K c/s real, 39541K c/s virtual
Benchmarking: NTLMv1 C/R MD4 DES (ESS MD5) [32/64]... DONE
Many salts: 3895K c/s real, 3895K c/s virtual
Only one salt: 2722K c/s real, 2722K c/s virtual
Benchmarking: NTLMv1 C/R MD4 DES (ESS MD5) [128/128 SSE2 intrinsics 12x]... DONE
Many salts: 1129M c/s real, 1129M c/s virtual
Only one salt: 37917K c/s real, 37917K c/s virtual
BTW these figures are without AVX because apparently the OSX assembler doesn't have a clue about such things, so using a real gcc does not help. That is just ridiculous.
magnum
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
