[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20060201132234.GA7957@openwall.com>
Date: Wed, 1 Feb 2006 16:22:34 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: Incremental Alpha Quagmire
On Wed, Feb 01, 2006 at 04:27:59AM -0800, Arias Hung wrote:
> Then what would be the proper way to create an 'optimized' UpperLower.chr
> or is that beyond the scope of explaining here?
The proper way to generate .chr files is to use samples of real
passwords. If you're able to get some passwords from your target system
cracked, then you should use that john.pot to generate your .chr file -
and do not restrict it to just letters.
If you're not able to get any passwords cracked, then you don't know
what characters are actually common in those passwords. Your saying
that uppercase characters are very common is pure speculation. This may
or may not be the case. If you'd like to make this assumption anyway,
you can convert some cracked passwords from another system (or just
words from a wordlist) to upper or mixed case and place those in a fake
john.pot (preceding each entry with a colon), then generate a .chr file
out of that. But it would be a hack that is only marginally better than
what I had explained previously. (It is better because it does not
consider different letters to be equally probable - it only does that
for upper vs. lower case.)
> Would you consider adding this as an option
Well, I could generate a .chr file with the 52 characters, but it would
consider lowercase letters to be far more common than uppercase ones
(because they _are_ far more common).
--
Alexander Peslyak <solar at openwall.com>
GPG key ID: B35D3598 fp: 6429 0D7E F130 C13E C929 6447 73C3 A290 B35D 3598
http://www.openwall.com - bringing security into open computing environments
Was I helpful? Please give your feedback here: http://rate.affero.net/solar
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
