4 ms·
Keepass (and LastPass, etc) is vulnerable to the same problem -- if you forget the master password, you can get locked out of everything. While it is useful, it
by apawloski 14y ago
Keepass (and LastPass, etc) is vulnerable to the same problem -- if you forget the master password, you can get locked out of everything. While it is useful, it is not the only answer. If the encrypted information is mission critical, then you must have a paper backup of the password stored somewhere safe.
Then again, if you don't, there is also a keepass2john [1].
[1] https://github.com/magnumripper/JohnTheRipper/blob/unstable-jumbo/src/keepass2john.c https://github.com/magnumripper/JohnTheRipper/blob/unstable-...
- stcredzero 14y agoIf you use your Keepass vault every day, there is little chance of forgetting. And there is always paper backup, which can be hand encrypted.
- DanBC 14y ago> there is little chance of forgetting. Head injury, neurological disease, etc.
- stcredzero 14y agoLow probability events, which are covered by the (properly secured) paper.
- StavrosK 14y agoIs it just me, or is john very very slow? I remember trying MD5 once, but the tries per second were in the thousands (whereas GPU-accelerated crackers do billions). Maybe I'm misunderstanding and it was a few thousand rounds of MD5, though.
- apawloski 14y agoJohn isn't always the fastest anymore, but it's definitely not very, very slow. It also provides the widest support by far. (And most of the formats are GPU accelerated, OpenMP threaded, or SSE parallelized. John itself also supports MPI. Make sure you've configured the makefile right.) If there's a format you're trying to crack, chances are john provides a convenient and reasonably fast way to crack it.
- StavrosK 14y agoInteresting, maybe I was doing something wrong. I was just using the package provided by Ubuntu.
- apawloski 14y agoNot sure which one is in the Ubuntu repository. Although John the Ripper is Solar Designer's baby, most of the current development (under Solar's guidance) occurs in the "jumbo" version led by another developer named magnum. You can download that version here: https://github.com/magnumripper/JohnTheRipper https://github.com/magnumripper/JohnTheRipper Then you can build it with CUDA or OpenCL, SSE, OpenMP, MPI, etc., support using the Makefile.
- StavrosK 14y agoThat's fantastic, thank you for the link.