Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20101116220327.GA23876@openwall.com>
Date: Wed, 17 Nov 2010 01:03:27 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Wordlist Mangling Rule

Al,

On Tue, Nov 16, 2010 at 05:05:35PM +1300, Al Grant wrote:
> So if you want to use words of only 8 characters or less, would it be wiser
> to truncate the dictionary before using it with JTR?

If your rules are such that each word will be looked at lots of times
(true for those you requested) and your hashes/ciphers are fast to
compute (not true for WPA), then yes.  Since WPA is so slow to compute
anyway, you're not going to achieve a significant speedup by speeding up
the application of wordlist rules.  99.9% of the CPU time is probably
spent on actually checking the candidate passwords that are generated by
the rules.  (I am guessing that you use JtR in conjunction with
Aircrack-ng or the like.)

Alexander

On Mon, Nov 08, 2010 at 06:59:28PM +1300, Al Grant wrote:
> The rule was more designed around the assumption that most residential 
> AP's protected with WPA etc Probably have a 8 character or shorter 
> word, possibly beginning with a capital, and if not 8 digits then made 
> To come to 8 by adding the appropriate number of digits, probably 123 etc.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.