Slashdot Mirror


The Death Throes of crypt()

dex writes "Tom Perrine and Devin Kowatch of the San Diego Supercomputer Center have issued "Teracrack: Password cracking using TeraFLOP and PetaByte Resources" (PDF, HTML version via Google). Using SDSC's prodigious computing facilities, they precomputed 207 billion crypt() hashes in 80 minutes."

10 of 388 comments (clear)

  1. But... by jchawk · · Score: 5, Funny

    Unless they release these hashes out into the wild, the average cracker/hacker does not have access to this type of resource...

    Definately cool though for proof of concept!

  2. Need more power by pvt_medic · · Score: 4, Funny

    80 Minutes? Obviously we just are not using enough power.

    --
    30% Troll, 50% Underrated, 10% Interesting
    Score:5, Troll
    1. Re:Need more power by grub · · Score: 5, Funny


      Obviously we just are not using enough power.

      Yup, if they ran this on the 220-230V systems in Europe this would have taken only 40 minutes. :)

      --
      Trolling is a art,
  3. Re:A testament to crypt() by Leffe · · Score: 5, Funny

    Not many pieces of code will be able to boast that lifespan.

    10 PRINT "HELLO WORLD"

    The most secure piece of code, even on Microsoft(r) Windows(tm) platforms.

    I've also got a question; What is the default/general password encryption scheme used in most GNU/Linux distributions? DES? Is DES an algorithm or a collection or interface or something... I don't know anything :(

    I did write a program that worked exactly as crypt did though, it included certain unspoken functions from -lcrypt, especially one named crypt.

  4. Proof that this was MEANT to happen! :-P by Wyzard · · Score: 5, Funny

    Clearly, crypt() was meant to die: just look at its name!

    As Schneier says on the first page of Chapter 1 of "Applied Cryptography",

    (If you want to follow the ISO 7498-2 standard, use the terms "encipher" and "decipher". It seems that some cultures find the terms "encrypt" and "decrypt" offensive, as they refer to dead bodies.)

  5. ftp site seems slow by morcheeba · · Score: 5, Funny

    They've got the tables on their ftp server, but it seems slashdotted because it's going really slow... my computer says "downloaded 4194304 bytes of 1209462790550 bytes (0.00034%)"

    Anyone have a bit torrent for this thing?

  6. Too Late by sirReal.83. · · Score: 5, Funny

    I've already rooted all your boxen and converted them to a worldwide Beowulf cluster.

    Time to crack some pr0n passwords...

  7. Re:So much for longer passwords being more secure? by thedillybar · · Score: 5, Funny

    Well, for starters, you should avoiding telling people the length of your password...

  8. That's what I like to see... by dmccartney · · Score: 5, Funny
    From the article:
    In cases where two sets of options produced insignificantly different speeds, a physical binary decision device (U.S. quarter coin) was flipped to determine which would be used.
    That had to be fun for them to write up.
    I am going to go convert two of my physical binary decision devices into a cup of coffee.
  9. Re:A testament to crypt() by panaceaa · · Score: 4, Funny

    20 GOTO 10

    Haha! Now it's a denial of service algorithm! Bet you wish you had

    11 END

    now, eh?