[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20060408013914.GB20672@openwall.com>
Date: Sat, 8 Apr 2006 05:39:14 +0400
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: windows passwords now don't work
On Fri, Apr 07, 2006 at 09:03:24AM +0100, Hari Sekhon wrote:
> Are you saying that the lm hash is case insensitive but your password
> is. If your password is compared to the lm hash then how could it be
> case sensitive. It must be compared to a case sensitive hash. Are ntlm
> and lm hashes different, ie the nt one was a next gen hash that enabled
> case sensitivity?
You're correct - except maybe for the historical aspect of it:
I am unsure whether it is appropriate to say that NTLM hashes are the
"next gen". They might not have been introduced into Windows NT any
later than LM ones. They were already in use in NT 4 and most likely
earlier.
I think there are also cases when a provided password is compared
against the target user's LM hash only - but that's not what happens for
local logins.
I am really no Windows expert; I am not even a user. Maybe someone else
would be able and willing to provide a more elaborate explanation of the
issues involved - what LM hashes are for, etc.
--
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598 fp: 6429 0D7E F130 C13E C929 6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments
Was I helpful? Please give your feedback here: http://rate.affero.net/solar
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
