john-users - 1password memorable passwords

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAKDRQS7JjvF50syvgyG10-5ZgbDa5AGW7PnBc6czDYzTxwPQCA@mail.gmail.com>
Date: Thu, 9 Nov 2023 09:53:25 +0000
From: Jimmy Yuen Ho Wong <wyuenho@...il.com>
To: john-users@...ts.openwall.com
Subject: 1password memorable passwords

Hi everyone,

I've recently lost the password to my macOS Time Machine sparsebundle and
I'm trying to crack the password to it using JtR.

I've extracted the cipher text with dmg2john but I'm at a loss of how to
configure and/or script JtR to crack the password.

I'm only trying to generate a rainbow table using 1password's memorable
password rule.

1password's memorable password rule is basically the XKCD 936 rule - each
word is randomly picked from a list of 18342 words, each word is at most 8
characters long, and the password is 3 to 4 words long separated by
hyphens. There are 2^56 combos and obviously I can't generate this wordlist
on disk.

I've looked at external modes and it's not obvious to me how the mini
language handles such a large wordlist. It doesn't look like it supports
C-strings, 2d arrays or reading a file either. Is there a smarter way to
configure and/or script JtR such that it batches and streams a continuously
generated wordlist without me writing a whole different mode?

Thanks,

Jimmy Yuen Ho Wong

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.