3 ms·
Microsoft is worse: passwords and MD4. (Windows' newest password hashing algorithm, NTLM, is just a plain MD4 hash of the password. I estimate my 4x5970 machin
by mrb 16y ago
Microsoft is worse: passwords and MD4.
(Windows' newest password hashing algorithm, NTLM, is just a plain MD4 hash of the password. I estimate my 4x5970 machine can crack NTLM hashes at a rate of about 45 billion per second.)
- tedunangst 16y agoCalling it Microsoft's newest algorithm is very misleading. Microsoft have themselves deprecated NTLM and recommend Kerberos. Technically, NTLM will always be the "newest" unless they invent something newer, but it doesn't mean you need to use it.
- mrb 16y agoAnd Microsoft's Kerberos implementation (AD) hashes passwords on the domain controller using... NTLM! How am I misleading?