Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20260827053455.GA4371@openwall.com>
Date: Thu, 27 Aug 2026 07:34:55 +0200
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: need an ataxia mode

Hi Damien,

On Wed, Aug 26, 2026 at 09:44:52PM -0700, Damien Otis wrote:
> I have, among other things, ataxia, or issues with fine motor skills. I’m one of those people who will type extra letters or wrong letters if I’m not paying attention carefully or apathetic due to the context. So it’s possible I added a letter or two, held on shift for one too many letters (only the first letter is capitalized), swapped a few letters, or maaaybe typed a number instead of a letter in the top left home row.

> Is there anybody here who’s got the insights on the options I should use? I want to be smart about this and go for the most likely options and eliminate the possibilities and expand if necessary.

I suggest that you put your originally intended password in a text file,
and use it as one-line wordlist along with "--rules" (default rules) or
"--rules=oi" (a special "overstrike and insert" rule set replacing or
inserting up to two characters at a time).

> The previous run returned a line:
> 1 0:00:00:00 - Algorithm: PBKDF2-SHA1 256/256 AVX2 8x
> I see 256. is AVX2 the specific instruction set for the standard sha 256?

No.  It just uses 256-bit vectors.

> if I’m using openCL does the format change? I guess it wouldn’t be AVX2.

Yes, this line wouldn't say AVX2 then.

Far more importantly, why does this say PBKDF2-SHA1?  This wouldn't be
the case for proper invocation on a "hash" produced by zip2john from a
zip archive, so you must have been running this incorrectly.

Can you show your command lines, for both zip2john and john?

Also, what version/revision and build of John the Ripper (again, for
both tools) do you use?  We've made important bug fixes for ZIP file
support since our 1.9.0-jumbo-1 release, so we strongly recommend that
you use a newer revision and build than that release.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.