Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20141106133621.GA11304@openwall.com>
Date: Thu, 6 Nov 2014 16:36:21 +0300
From: Aleksey Cherepanov <lyosha@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: phpass and $dynamic_17$

On Tue, Nov 04, 2014 at 04:43:00PM +0300, Aleksey Cherepanov wrote:
> When I don't specify --format= , john loads $P$ as phpass and
> $dynamic_17$ as dynamic_17 but for dynamic_17, it shows that it is
> possible to load the hashes as phpass while it does not show similar
> option for phpass.
> 
> With --format=phpass, both $P$ and $dynamic_17$ files are loaded the
> same way.
> 
> With --format=dynamic_17, only $dynamic_17$ is loaded, $P$ could not
> be loaded this way. It explains why john does not propose options for
> $P$.

There is a minor inconvenience with it: when file has both $P$ and
$dynamic_17$, order of the hashes affects john's automatic decision
about format of hashes.


When $dynamic_17$ is before $P$ (2 $dynamic_17$ then $H$ and $P$):

Warning: detected hash type "dynamic_17", but the string is also recognized as "phpass"
Use the "--format=phpass" option to force loading these as that type instead
Warning: only loading hashes of type "dynamic_17", but also saw type "phpass"
Use the "--format=phpass" option to force loading hashes of that type instead
Loaded 2 password hashes with 2 different salts (dynamic_17 [phpass ($P$ or $H$) 32/64 1x2  (MD5_body)])


In this case, --format=phpass is needed to load all hashes.

When $P$ goes first ($H$, $P$, 2 $dynamic_17$):

Loaded 4 password hashes with 2 different salts (phpass [phpass ($P$ or $H$) 32/64 1x2  (MD5_body)])


Also I'd expect for this case
Warning: detected hash type "phpass", but the string is also recognized as "dynamic_17"

I guess it would be much slower to check everything. So a separate
option may be used. There may be a whole mode when john does not
perform cracking at all but shows detailed information about hashes
with possibilities for each hash separately.

Thanks!

-- 
Regards,
Aleksey Cherepanov

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.