john-users - Re: pgp private key / passphrase (How to?)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <52BC550E.50608@web.de>
Date: Thu, 26 Dec 2013 16:10:54 +0000
From: Demian Smith <demian.smith@....de>
To: john-users@...ts.openwall.com
Subject: Re: pgp private key / passphrase (How to?)

Thanks, Albert,
I was able to get gpg2john running (even though I had to pull the
1.7.9-jumbo-8-RC_mpi+omp from github since I could not get it to work
with john-1.7.9-jumbo-7 due to unknown reasons).

I tried it with the rule and the parts of the phrase I did remember,
however I was not able to recover it, apparently I had it remembered
wrong altogether. I created a new key with a similar passphrase and it
was recovered no problem, so the error most be somewhere in my head ;o)

Thanks for the help,
Demian
 ★ On 13/12/26 01:48 p.m. Albert Veli wrote ★
> If your .gnupg private key is in the file mykey-priv.asc, then run:
> 
>  ./gpg2john mykey-priv.asc
> 
> and save the output into a new file. Then you can run john on the new file.
> If you know parts of the password, then put all parts you know into a
> separate dictionary. Then you can create a custom rule. Maybe something
> like this:
> 
> [List.Rules:MyRule]
> AZ"[0-9][0-9][0-9][0-9][x][y][z]"
> 
> Append those two line to the end of john.conf (or put them in
> john.local.conf), then run
> 
>  ./john --wordlist=mylist.txt --rules=MyRule mygpg.txt
> 
> Where mylist.txt contains (at least) the word absd and mygpg.txt is the
> output of gpg2john. The custom rule will then try all combinations of 4
> digits and append xyz at the end.
> 
> 
> On Wed, Dec 25, 2013 at 9:53 PM, Demian Smith <demian.smith@....de> wrote:
> 
>> Dear list,
>> I'd like to try to recover my private passphrase fpr a pgp-key. I know
>> most of it but 3 parts of it, which leaves me with abou 217
>> possibilities. I suppose this would be "easy" for anybody "in the
>> knowing", however, this is my first time I'm using JtR. As far as I
>> understand I would have to write some rule for the to-try-passphrase to
>> add the specifics at a certain place… say, the phrase is
>>> absdXXXXxyz
>> And I know that XXXX consists of a combination of numbers only, I could
>> then tell JtR to try the different combinations (I have a txt file
>> containing all possibilities, created with crunch), right?
>>
>> The problem is
>> a) how do I add pgp support to JtR (I have john-1.7.9-jumbo-7 wit OMP
>> support running) and b) how would I write the personalized rule for to try?
>>
>> I hope this is not to much to ask for help and thanks in advance,
>> Demian
>>
>

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.