3 ms·
You can bruteforce much faster on GPU. E.g. 20*10^9 ripe160 hashes per second on 8x AMD R9 290X (price is around $3000): https://hashcat.net/oclhashcat/ https:
by monort 11y ago
You can bruteforce much faster on GPU.
E.g. 20*10^9 ripe160 hashes per second on 8x AMD R9 290X (price is around $3000):
https://hashcat.net/oclhashcat/ https://hashcat.net/oclhashcat/
60 bits are not secure against attacker with medium budget.
- luck87 11y agoSome years before oclHashCat support, I buil a gpu cracker for truecrypt volume TrueCrack (https://code.google.com/p/truecrack/ https://code.google.com/p/truecrack/) . To be honest oclHashCat has better performance. Now the board of the oclHashCat tests ( AMD R9 290X ) costs about 300 euro (not $3000).
- monort 11y agoThey used 8 cards for that test.
- kijin 11y agoThen we can use GPUs to speed up VeraCrypt's PBKDF, too. The point is that there's no need for a PBKDF that takes 10 seconds on modern hardware. Sure, that 60-bit passphrase is weak. But it takes a trivial amount of effort to increase the entropy of a passphrase. Let's say I increased it to 80 bits. In terms of brute-force resistance, that's equivalent to increasing the PBKDF's iteration count 1 million times.