full-disclosure - NetSupport School Pro: Password Encryption weaknesses

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <40642920.3000909@onryou.com>
From: lists2 at onryou.com (Cael Abal)
Subject: NetSupport School Pro: Password Encryption
 weaknesses

spiffomatic 64 wrote:

> The letters are expressed using a hexadecimal type of system. Every 
> letter is shown by two characters the first character can be any ascii 
> character while the second is in a range from a-p. This works just 
> like hex in that ap+1=ba. Its not case sensitive so that also makes it 
> easier for kids to get passes. The characters start at EM. So A= EM 
> B=EN and so on. Each letter is also added to by the number of letters 
> in front of it. So the crypt of aa= EN9O while the crypt of aaa=EO9P>A. 

How cute!

Cael