john-users - RE: sha1 + hex salt

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <01d401ccebf8$e4ec9b30$aec5d190$@net>
Date: Wed, 15 Feb 2012 09:45:50 -0600
From: "jfoug" <jfoug@....net>
To: <john-users@...ts.openwall.com>
Subject: RE: sha1 + hex salt

This version works just fine.  This would be appended to the
./run/dynamic.conf file

[List.Generic:dynamic_2201]
Expression=SHA1($p) [16-byte null padded SHA1]
Flag=MGF_SHA1_40_BYTE_FINISH
Func=DynamicFunc__clean_input
Func=DynamicFunc__append_keys
Func=DynamicFunc__set_input_len_16
Func=DynamicFunc__SHA1_crypt_input1_to_output1_FINAL
Test=$dynamic_2201$20c59472b34ec4b9678b7149d519a2338bc31ba9:92086390

There was a set input len_16, put in for the pix format, btw ;)

I built a input file containing just 1 line (sha1-16.in):

20c59472b34ec4b9678b7149d519a2338bc31ba9

I then ran john using:

./john -inc:digits sha1-16.in -form=dynamic_2201

Loaded 1 password hash (dynamic_2201 SHA1($p) [16-byte null padded SHA1]
[128x1 (MD5_Body)])
92086390         (?)
guesses: 1  time: 0:00:00:31 DONE (02/15/12 09:40:46)  c/s: 1651K  trying:
92080735 - 92086437
Use the "--show" option to display all of the cracked passwords reliably

Note, this was a debugging build, no sse/mmx, VC.  The speed is a little
slow, but it shows the above format worked just fine.

Jim.

>>[List.Generic:dynamic_1999]
>>Expression=sha1($p."\0\0\0\0\0\0\0\0")
>>Flag=MGF_SHA1_40_BYTE_FINISH
>>Func=DynamicFunc__clean_input
>>Func=DynamicFunc__append_keys
>>Func=DynamicFunc__append_input1_from_CONST1
>>Func=DynamicFunc__SHA1_crypt_input1_to_output1_FINAL
>>Test=$dynamic_1999$20c59472b34ec4b9678b7149d519a2338bc31ba9:92086390
>>CONST1=\x00\x00\x00\x00\x00\x00\x00\x00
>>
>>Unfortunately, this setting of CONST1 does not appear to work right (so
>>this format fails self-test).
>>
>>Jim - is this something you'd enhance in a future revision of your
>code?
>>Alternatively/additionally, how about supporting hex-encoded salts?
>>
>>Alexander

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.