full-disclosure - Cracking the entire set of DES-based crypt(3) hashes. Interested ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <fca62f020707300009m7109725bxa9fb9a1bb304db2d@mail.gmail.com>
Date: Mon, 30 Jul 2007 00:09:18 -0700
From: "n/a n/a" <xor.rax.rax@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Cracking the entire set of DES-based crypt(3)
	hashes. Interested ?

Let's imagine there is someone out there able to crack any hash of the
entire set of DES-based crypt(3) hashes in a reasonable amount of time,
say 5-10 days.

Let's imagine that no matter how many hashes are submitted to the system,
1 or 1000, all of them are guaranteed to be cracked in this constant
amount of time.

Let's also imagine this service becomes commercially available.

Even though DES-based crypt(3) is outdated and obsolete, its use is still
widespread in typical large heterogeneous IT environments. So I guess this
service would interest lots of legitimate clients such as pentesters,
government agencies, IT departments in large companies or universities,
and the likes.

How much would you value this service ? Would you pay $100, $10, $1 per
hash to crack ? Would you require anonymity to use the service ?

-XRR

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/