Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20150226115207.GA8398@openwall.com>
Date: Thu, 26 Feb 2015 14:52:07 +0300
From: Solar Designer <solar@...nwall.com>
To: john-users@...ts.openwall.com
Subject: Re: new all.lst; JtR 1.8.0 Pro for Linux

On Thu, Feb 26, 2015 at 12:15:40AM -0800, Danux wrote:
> So, do we need to do any configuration change for John to handle the
> European languages?

With all.lst and no rules, usually no, because all.lst now includes
words in all of iso-8859-1, utf-8, and with accents, umlauts, etc.
replaced with "the corresponding" ASCII characters.  Obviously, for
words that only needed ASCII characters as they were, only one copy is
included (the other two would be the same).

With other wordlists, yes, jumbo-specific encoding options may be
helpful.

With rules, jumbo-specific encoding options may also be helpful, as they
control things such as upper/lower case conversions by the rules.

Also, with some hash types the encoding might need to be specified as it
affects how the password is hashed.  Per a quick grep over jumbo, I
think this might apply to 7z, EFS, MSCash (DCC), MSCash2 (DCC2), NT,
RAR, SybaseASE, WoWSRP.  Also, apparently for sapB and sapG formats
having input in utf-8 makes no sense.

And yes, this means that having different input encodings in the same
wordlist file is not great when you do specify the input encoding (as it
prevents you from specifying it correctly for all of the entries at
once).  However, since encodings are only supported in jumbo (not in the
core tree, and not in Pro), and since most people don't specify
encodings most of the time anyway, I think having this stuff in all.lst
is helpful.  The file size increased only by about 25%, from around 4
million to around 5 million entries, and many of the added ones use
ASCII characters only (since they use transliteration).

magnum might tell you/us more about the encoding options in jumbo.

Alexander

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.