Slashdot Mirror

A fast general cpu-core can at best hope to test 16 million (2^24) AES keys per second by todays standards. (Estimate from http://www.cr0.net:8040/code/crypto/aesbench/). Assuming you have 1 million (2^20) cores available, you would be guaranteed to crack 69 bit AES in one year (2^25 secs).

Cracking 128 bit AES would take 500 billion billion years with those 1 million cores. Dedicated chips might do it faster, but it would still be billions of billions of years. I'm assuming that the cipher has no cryptographic weakness, of course.

Add to it the fact that they didn't use to clear off the clear text passwd (as entered by user) from the memory.

As a result of this, people could easily do a memory scan of lsass.exe to get the passwds of last few users who had logged on.

See http://www.cr0.net:8040/misc/cachedump.html

No.

Real crypto (they type the government uses to protect top secret data) is free:

• Public domain C/C++ AES code
• DJB also has a public-domain C and assembly AES code
• Dr. Gladman has some simple BSD licensed (usable in any commerical closed-source program) C/C++ and assembly implementations of AES
• There are some GPL implementations of AES available, for people who can handle the GPL being in their code. (GPL forces the release of source code)
• This Javascript page will help people writing AES in other languages

Nearly all of the latest WEP cracking utils run on Windows. http://www.cr0.net:8040/code/network/aircrack/#q31

SHA-1 Hash Algorithm and Source Code

SHA-1 Hash Algorithm and Source Code.

Perhaps you should read WEP: Dead Again, Part 1. It compares various WEP cracking tools to see how fast they can crack WEP keys with varying amounts of packets. While the popular AirSnort usually needs over 10 million encrypted packets to crack a WEP key, aircrack usually needs around 500,000. That's the difference between being able to gather enough packets in a day versus a week or more.