10 ms·
8x Nvidia GTX 1080 Hashcat Benchmarks
- deleted 10y ago[deleted]
- nikcub 10y agoI'm going to wait for the 1070 benchmarks as in other series the x70 models had a better price/performance ratio: http://www.videocardbenchmark.net/high_end_gpus.html#value http://www.videocardbenchmark.net/high_end_gpus.html#value The 1080 is $599 while the 1070 will be $379 while the Titan X is ~$1000. $1,500 for a 4x 1070 setup could be very attractive considering the performance should be on par with 4x Titan X (at $4k) edit: forgot to mention power consumption as well, which should be a component of price/performance
- rplnt 10y agoEven lower models will still have better price/performance ratios. Top-ends are heavily overpriced, because they can be (for a while at least).
- deleted 10y ago[deleted]
- davidiach 10y agoWhat are you using this setup for?
- nikcub 10y agopassword cracking and generating onion addresses[0] edit: https://www.oniongen.com/ https://www.oniongen.com/
- Tinyyy 10y agoHow can your users trust that you do not keep a copy of the private key?
- benmanns 10y agoI think it's something like the user holds private key A, publicizes public key A, and requests private key B such that public key A+B has the desired characteristics and private key A+B is only known if you have private key A.
- stephengillie 10y agoWould a USB ASIC give better performance?
- therein 10y agoIf that ASIC is designed to solve that same hash function, yes.
- dogma1138 10y agoPCIE slots are limited so when you are talking about actual compute scale the 1070 can be more expensive considering you'll have to get another case, cpu, ram, and an PSU that can handle 4 cards at max load. And of course the more components you have in a given system the more likely is that one of the will fail, granted if you are designing a system to be resilient against attrition a system with more lower powered components can be more resilient than a system with fewer more powerful ones based on the performance difference between them and the MTBF for each component. But bang for buck charts don't mean much even for Gaming I never understood why people even use them, spend what you can and want to get the performance you want. Spending 50% more to get only 20% more performance is a valid option because those 20% can mean the difference between a playable game at high resolution and a laggy mess. Traditionally SLI setups for mid range cards could out-perform and be cheaper than high end cards but with a huge caveat - being dependant on the SLI profile for the game, if it come out to be shitty or non-existent you are just stuck with 2 cards that can't really run the game at the settings/resolution you want. Also unless you are building a small datacenter power consumption can be ignored, the 50-75W difference in total system draw between a mid range and a high end card when the rest of the hardware is the same isn't going to have any financial impact on anyone even if we take the most expensive power in Europe that's going to come out to about 30 cents per KWh.
- kuschku 10y agoEh, the most expensive power in Europe is more at 60ct per kWh. Average in northern Germany is already 38ct per kWh, although this is expected to change with the northern and southern German electricity market being split in the next weeks (Northern Germany has a huge surplus, Southern Germany not nearly enough).
- dogma1138 10y agoEven so we are usually talking about 50W max draw difference between the mid and high end cards is still 20 hours of gaming at max load before you have 60 cents difference between them :P
- 10y ago
- hathym 10y agoCan you do some gaming performance in FPS?
- tehrei 10y agoIf you're interested in Linux-specific benchmarks, https://phoronix.com/ https://phoronix.com/ has some, and in general http://anandtech.com http://anandtech.com and http://www.hardocp.com http://www.hardocp.com .
- nikcub 10y ago1080: http://www.hardocp.com/article/2016/05/17/nvidia_geforce_gtx_1080_founders_edition_review http://www.hardocp.com/article/2016/05/17/nvidia_geforce_gtx... 1070: http://www.hardocp.com/article/2016/06/06/nvidia_geforce_gtx_1070_founders_edition_review/4 http://www.hardocp.com/article/2016/06/06/nvidia_geforce_gtx... Other benchmarks: http://www.trustedreviews.com/nvidia-geforce-gtx-1080-review-performance-benchmarks-and-conclusion-page-2 http://www.trustedreviews.com/nvidia-geforce-gtx-1080-review...
- rasz_pl 10y agoIm sure he meant 8-way sli gaming benchmarks
- binarray2000 10y agoFascinating hardware with great processing speed. One question for the knowledgeable: Why are speeds for PostgreSQL hashes so high (~ 25k MH/s) compared with, say, MSSQL(2012) (~ 1k MH/s)?
- nailer 10y ago(entrepreneur hat on) The hashcat project could make a bunch of money with cracking as-a-service: you supply hashes, hashcat runs on a dedicated multi-GPU instance (SoftLayer etc provides these), and get outputs. For users: no setting up hardware or software and much better price / performance than DIY For hashcat developers: money to pay their rent and work on hashcat Edit: looks like the company sells SW/HW but not as-a-service. Massive opportunity for them there: https://sagitta.pw/software/ https://sagitta.pw/software/ Edit 2: they're doing it: Q1 2017 https://twitter.com/jmgosney/status/740146970254147584 https://twitter.com/jmgosney/status/740146970254147584
- robk 10y agoI think you're talking about what gpuhash.me does now
- fivesigma 10y ago>WPA/WPA2: 3177.6 kH/s 22.5 minutes (11.25 on average) to crack a randomized 8 hex digit password that a good number of wifi modem/routers come with (mine certainly did)
- exhilaration 10y agoCan you point me to some resources for learning how to do this? Starting with capturing my wi-fi traffic to running the right tools to crack it? I'd like to see how long it takes me to crack my own password.
- unbelievr 10y agoThere are quite a lot of guides out there on sites like hackforums I reckon. The search keywords are "aircrack-ng WPA". In short terms, you need to sniff the 4-way handshake between a legitimate client and the AP it connects to. This can sometimes be forced by spoofing a "deauth" (disconnect) packet from the client, but requires support in the chipset for your wlan-card. (Injection and monitor mode). Once you have the handshake, your options are either aircrack-ng, hashcat or other password cracking tools. Some of these have a crazy amount of options and possibilities for cracking, and getting to know them can increase your success rate by a lot. However, the easiest way these days is to exploit WPS in the AP. Look up Reaver and Pixiewps.
- efraim 10y agoThis[0] guide goes over how to use WiFite in Kali Linux[1] to capture a wpa handshake and how to use hashcat to crack it. You have to have a wifi-card that is compatible with aircrack-ng[2]. [0]https://www.blackmoreops.com/2014/03/27/cracking-wpa-wpa2-with-hashcat-kali-linux/ https://www.blackmoreops.com/2014/03/27/cracking-wpa-wpa2-wi... [1]https://www.kali.org/downloads/ https://www.kali.org/downloads/ [2]http://www.aircrack-ng.org/doku.php?id=compatible_cards http://www.aircrack-ng.org/doku.php?id=compatible_cards
- snuxoll 10y agoThings like this really make me consider using WPA-Enterprise on my home AP, enabling RADIUS on my pfSense VM wouldn't be too hard. I don't particularly care about the guest network, it's on a separate VLAN and has no access to the rest of the network (I should probably throttle the traffic).
- danielsamuels 10y agoI'd be interested in seeing that the numbers are like for Argon2.
- chrisra 10y agoTime to get a new password.
- riskable 10y agoNo. Time to start using proper password hashing algorithms (e.g. scrypt) with added protections such as requiring n rounds of hashing. Tip: To require 65535 rounds of hashing on a Debian or Ubuntu system just run this: sed -i -e 's/sha512$/sha512 rounds=65535\n/g' /etc/pam.d/common-password (Note: Assumes you're still using the default hashing SHA-512 hashing algorithm)
- distances 10y agoThere was an earlier discussion about KeePassX, where I mentioned I used 10 million rounds of the AES encryption. Someone commented that it doesn't really add much additional strength. I'm not familiar enough with the topic to understand why it would be so. I wonder if there is some basis for that claim?
- dogma1138 10y ago[Disclaimer: This is assuming you aren't talking about key schedule, since you use odd terminology, and even then how do you get to 10M rounds is beyond me] Because you use the same key, not to mention the same IV most likely, unless you are storing 10M IV's some where... Doing 10M rounds of AES is just stupid(ly) expensive. Also verifying the decryption with 10M rounds, means, 10M CRC checks, and if you are using it on a non-ECC system there is a good chance that many attempt to decrypt anything stored like that will fail due to single bit errors.
- Freaky 10y agoHe's talking about KeePass's key derivation algorithm - SHA256 the password, make a random 256 bit key, AES-encrypt the hash N times using the key, and SHA256 the result. 10 million iterations is about a second of work on a typical desktop.
- izietto 10y agoI wonder how many fps runs Minesweeper...
- stephengillie 10y agoI wonder how many shaders can be run in Minecraft and still get 60fps with this setup.
- cridenour 10y agoProbably still none.
- Freaky 10y agoThe scrypt and bcrypt rates are a bit misleading because they're with unrealistically low work factors: * bcrypt: 2^5, when 2^10 or 2^11 is a much more typical figure * scrypt: N=1024 r=1 -> 128KiB. For interactive logins the recommendation is N=16384 r=8 -> 16MiB. LastPass is also off by a factor of 10 (500 rounds, when they default to 5000).
- Justsignedup 10y agoIt would help if they indicated number of iterations for all algorithms.
- Freaky 10y agoMost of them are defined here: https://github.com/hashcat/oclHashcat/blob/master/include/shared.h#L1071-L1123 https://github.com/hashcat/oclHashcat/blob/master/include/sh...
- Zenst 10y agoInteresting that the GOST-R 512bit seems no slower than the 256bit hashing. Does this mean the 256bit is underperforming or is the 512bit flavour just as compute intensive as its lesser counterpart with half the number of bits. Least for me seems to stick out a bit(sic). "Hashtype: GOST R 34.11-2012 (Streebog) 256-bit Speed.Dev.#1.: 50018.8 kH/s (334.18ms) Speed.Dev.#2.: 49784.4 kH/s (332.43ms) Speed.Dev.#3.: 51323.1 kH/s (325.52ms) Speed.Dev.#4.: 50947.0 kH/s (327.87ms) Speed.Dev.#5.: 51510.6 kH/s (329.13ms) Speed.Dev.#6.: 50417.3 kH/s (331.39ms) Speed.Dev.#7.: 50825.4 kH/s (333.57ms) Speed.Dev.#8.: 50853.3 kH/s (333.38ms) Speed.Dev.#.: 405.7 MH/s Hashtype: GOST R 34.11-2012 (Streebog) 512-bit Speed.Dev.#1.: 49979.4 kH/s (329.40ms) Speed.Dev.#2.: 49849.7 kH/s (330.26ms) Speed.Dev.#3.: 50315.4 kH/s (336.13ms) Speed.Dev.#4.: 50305.3 kH/s (328.99ms) Speed.Dev.#5.: 51486.7 kH/s (326.69ms) Speed.Dev.#6.: 49709.2 kH/s (328.72ms) Speed.Dev.#7.: 51328.8 kH/s (330.30ms) Speed.Dev.#8.: 51530.7 kH/s (326.41ms) Speed.Dev.#.: 404.5 MH/s"
- gh2k 10y agoI'm surprised that the primary use case for a machine with 8 of these things in would be password cracking. (https://sagitta.pw/hardware/gpu-compute-nodes/brutalis/ https://sagitta.pw/hardware/gpu-compute-nodes/brutalis/) There's not even any mention of training neuralnets, rendering things or doing science. Are there many non-shady reasons for purchasing the above device based on the purpose described?
- agency 10y agoFWIW password cracking is not necessarily a shady use-case. At my old job the infosec team had a GPU cluster continuously trying to crack employees' passwords and would force users to change passwords if they succeeded.
- deleted 10y ago[deleted]
- xtreme 10y agoA number of molecular dynamics, astrophysics, and similar simulation applications are scalable enough to use 8 GPUs per node. Especially when multiple nodes are involved, these scientific applications are in general more mature compared to deep-learning frameworks, which have just started supporting multiple nodes.
- znebby 10y agoIt just goes to show that in 2016, you really can't be using SHA1/256/512 for password hashing anymore, even salted. Bcrypt/Scrypt or similar is a must.
- inglor 10y agoFrom what I can tell with reasonable password length SHA512 still seems relatively secure. I'm not saying there is any reason you should use it - but if it does 8624.7Mh/s and your password is JUST numbers, lowercase and uppercase English letters and it's only 10 characters it would still take it (26+26+10)^10 / 8624.7Mh/s ~= 83929936 seconds which is still about 3 years for a single hash. If it's 12 characters - then you're up to 10,000 years.
- znebby 10y agoTrue - reasonable password length being the important factor. I was basing my calculations on 8 character passwords. At my university we were forced to use passwords that are exactly 8 characters long, for some ridiculous reasons. And this was meant to be one of the top universities in Australia...
- TimPrice 10y ago(not only) Extremely common of any kind of organization where there have been computers for more than 3 decades.
- inglor 10y agoIt's because the internet is full of monkeys: http://security.stackexchange.com/questions/33470/what-technical-reasons-are-there-to-have-low-maximum-password-lengths http://security.stackexchange.com/questions/33470/what-techn... > Originally, some developer, somewhere, was working on an old Unix system from the previous century, which used the old DES-based "crypt", actually a password hashing function derived from the DES block cipher. In that hashing function, only the first eight characters of the password are used (and only the low 7 bits of each character, as well). Subsequent characters are ignored. That's the banana.
- boromi 10y agoIs double precision performance crippled?
- mrb 10y agoYes: DP runs at 1/32 the rate of SP on GP104: https://en.wikipedia.org/wiki/Pascal_(microarchitecture)#Performance https://en.wikipedia.org/wiki/Pascal_(microarchitecture)#Per... However it is uncrippled on GP100 (ie. Tesla P100).