4 ms·
I cracked a lot of sha512crypt and PBKDF2-HMAC-SHA256 hashes with a cheap GPU at Defcon this year. Here's the write-up. (Cracking Passwords with Cheap Hardware
by _wldu 6y ago
I cracked a lot of sha512crypt and PBKDF2-HMAC-SHA256 hashes with a cheap GPU at Defcon this year. Here's the write-up.
(Cracking Passwords with Cheap Hardware at Defcon):
https://github.com/62726164/cmiyc2020 https://github.com/62726164/cmiyc2020
- SloopJon 6y agoDo I understand correctly that you cracked about half of the 12,000-iteration PBKDF2 hashes using a first-gen ThreadRipper and a GTX 1060, and would have cracked more except for a formatting problem in the hashes? That's eye opening. Is Word Machine publicly available, or is it the sort of thing that has an audience of one?
- _wldu 6y agoYes, that's right. I may have not cracked them during the contest (but just after). I don't recall. Once I figured out the pattern, I could attack it much more efficiently. So, it's not as impressive as it seems. And, unfortunately, wm has an audience of one. Mostly because I'm ashamed to share it.