Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sat, 29 Aug 2009 11:27:21 -0500
From: "JimF" <>
To: <>
Subject: Re: Thoughts and questions on creation of a 'generic' MD5 hash set format (to handle 'all' of them)

From: "SL" <>
> $u is supposed to be the username, right?
> $s2 is something like a static, systemwide key (like the syskey in 
> Windows SAM).
> Whatever I have encountered so far is on your list already. Good Job.
> In handling, I see not much difference between $u and $s2 (or $k or 
> whatever). But I agree to the path of 'reserving' such expressions.

There was an eariler reply of:

>md5(md5(md5($p).$s).$s2) with $s2 being a secondary salt.

So my assumption, was that there would be a format with 2 salts in it.  And 
yes, the $u (in my 'simple' syntax), would be $user or the user ID for this 
user.    The user id I know 'can' be obtained, as it is within the database 
structures in memory when John is running (not sure if -save-memory keeps 
the user id out of memory).  I would think the second salt would have to 
somehow be 'found' within the hash's data, but I have not laid out just how 
to do that yet, as I am not sure exactly how it is being 'used' in the field 
(i.e. I have no example input data to test against).

I got about 1/2 done last night implementing the expressions, checking that 
they 'worked' (at least that the validation data ran properly).  However, 
today I have to spend most of my time on a 'honey-do' list.  Meaning the 
woman is on the rampage to get little projects finished around the house, 


To unsubscribe, e-mail and reply
to the automated confirmation request that will be sent to you.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.