4 ms·

How many hashes per second can a high end GPU do?

wolf550e 6y ago
You can find benchmarks on Google, e.g. https://gist.github.com/binary1985/c8153c8ec44595fdabbf03157562763e https://gist.github.com/binary1985/c8153c8ec44595fdabbf03157... 75 giga hashes per second for ntlm.
- mmm_grayons 6y ago
  That's v5.0.0, so not really applicable when considering the new performance improvements in version 6 or CUDA support.
TecoAndJix 6y ago
I ran it recently on my 1080ti: Session..........: hashcat Status...........: Exhausted Hash.Type........: MS Office 2010 Hash.Target......: $office$201010000012816*[removed] Time.Started.....: Sat Apr 18 09:05:24 2020 (3 mins, 35 secs) Time.Estimated...: Sat Apr 18 09:08:59 2020 (0 secs) Guess.Base.......: File (merged.txt) Guess.Queue......: 1/1 (100.00%) Speed.#1.........: 92589 H/s (2.67ms) @ Accel:256 Loops:128 Thr:64 Vec:1 Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts Progress.........: 19922208/19922208 (100.00%) Rejected.........: 0/19922208 (0.00%) Restore.Point....: 19922208/19922208 (100.00%) Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:99968-100000 Candidates.#1....: Hardware.Mon.#1..: Temp: 74c Fan: 55% Util: 89% Core:1949MHz Mem:5508MHz Bus:8 Started: Sat Apr 18 09:05:07 2020 Stopped: Sat Apr 18 09:09:00 2020
- jonluca 6y ago
  Is that saying ~92k hashes per second? What's the MS Office 2010 hash type?
  - TecoAndJix 6y ago
    I think that is what it is saying! The hash type is AES-128 with SHA-1 hash stretching x100,000[0][1]. The Office 2010 hashmode is 9200[2]. At work, someone of importance wanted access to a password protected file from an employee that left. I ran it through several wordlists to demonstrate an attempt was made and shared the cost/time required for 100% recovery. Never solved it and the cost/time analysis was enough to make them say oh well! [0] https://en.m.wikipedia.org/wiki/Microsoft_Office_password_protection https://en.m.wikipedia.org/wiki/Microsoft_Office_password_pr... [1] https://en.m.wikipedia.org/wiki/Key_stretching https://en.m.wikipedia.org/wiki/Key_stretching [2] https://hashcat.net/wiki/doku.php?id=example_hashes https://hashcat.net/wiki/doku.php?id=example_hashes
mmm_grayons 6y ago
That depends heavily on which hash algo: cheap GPUs can rip through MD5s but expensive ones will still take forever on bcrypt with a high work factor. Hashcat 6 beta hit 100GH/s for NTLM on a 2080 TI, though: https://twitter.com/hashcat/status/1095807014079512579?lang=en https://twitter.com/hashcat/status/1095807014079512579?lang=...

You can find benchmarks on Google, e.g. https://gist.github.com/binary1985/c8153c8ec44595fdabbf03157562763e https://gist.github.com/binary1985/c8153c8ec44595fdabbf03157... 75 giga hashes per second for ntlm.

mmm_grayons 6y ago
That's v5.0.0, so not really applicable when considering the new performance improvements in version 6 or CUDA support.

TecoAndJix 6y ago

I ran it recently on my 1080ti: Session..........: hashcat Status...........: Exhausted Hash.Type........: MS Office 2010 Hash.Target......: $office$201010000012816*[removed] Time.Started.....: Sat Apr 18 09:05:24 2020 (3 mins, 35 secs) Time.Estimated...: Sat Apr 18 09:08:59 2020 (0 secs) Guess.Base.......: File (merged.txt) Guess.Queue......: 1/1 (100.00%) Speed.#1.........: 92589 H/s (2.67ms) @ Accel:256 Loops:128 Thr:64 Vec:1 Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts Progress.........: 19922208/19922208 (100.00%) Rejected.........: 0/19922208 (0.00%) Restore.Point....: 19922208/19922208 (100.00%) Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:99968-100000 Candidates.#1....: Hardware.Mon.#1..: Temp: 74c Fan: 55% Util: 89% Core:1949MHz Mem:5508MHz Bus:8 Started: Sat Apr 18 09:05:07 2020 Stopped: Sat Apr 18 09:09:00 2020

jonluca 6y ago
Is that saying ~92k hashes per second? What's the MS Office 2010 hash type?
- TecoAndJix 6y ago
  I think that is what it is saying! The hash type is AES-128 with SHA-1 hash stretching x100,000[0][1]. The Office 2010 hashmode is 9200[2]. At work, someone of importance wanted access to a password protected file from an employee that left. I ran it through several wordlists to demonstrate an attempt was made and shared the cost/time required for 100% recovery. Never solved it and the cost/time analysis was enough to make them say oh well! [0] https://en.m.wikipedia.org/wiki/Microsoft_Office_password_protection https://en.m.wikipedia.org/wiki/Microsoft_Office_password_pr... [1] https://en.m.wikipedia.org/wiki/Key_stretching https://en.m.wikipedia.org/wiki/Key_stretching [2] https://hashcat.net/wiki/doku.php?id=example_hashes https://hashcat.net/wiki/doku.php?id=example_hashes

mmm_grayons 6y ago

That depends heavily on which hash algo: cheap GPUs can rip through MD5s but expensive ones will still take forever on bcrypt with a high work factor. Hashcat 6 beta hit 100GH/s for NTLM on a 2080 TI, though: https://twitter.com/hashcat/status/1095807014079512579?lang=en https://twitter.com/hashcat/status/1095807014079512579?lang=...