<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/'><id>tag:blogger.com,1999:blog-6881326265222951171.post449255362579788574..comments</id><updated>2011-05-20T11:53:35.969+02:00</updated><title type='text'>Comments on Distracted: EmDebr, the MD5 password brute forcer</title><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://blog.distracted.nl/feeds/449255362579788574/comments/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default'/><link rel='alternate' type='text/html' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html'/><author><name>Daniel Niggebrugge</name><uri>http://www.blogger.com/profile/02053201958307619797</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>6</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>25</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-6881326265222951171.post-6872230527519579417</id><published>2010-09-23T16:49:44.501+02:00</published><updated>2010-09-23T16:49:44.501+02:00</updated><title type='text'>Please give the valid link to download your script...</title><content type='html'>Please give the valid link to download your script.&lt;br /&gt;&lt;br /&gt;http://rs371.rapidshare.com/files/233288217/MD5.rar &lt;br /&gt;&lt;br /&gt;is broken..&lt;br /&gt;&lt;br /&gt;Thanks</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/6872230527519579417'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/6872230527519579417'/><link rel='alternate' type='text/html' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html?showComment=1285253384501#c6872230527519579417' title=''/><author><name>md5pass</name><uri>http://www.md5pass.com</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html' ref='tag:blogger.com,1999:blog-6881326265222951171.post-449255362579788574' source='http://www.blogger.com/feeds/6881326265222951171/posts/default/449255362579788574' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1332630661'/></entry><entry><id>tag:blogger.com,1999:blog-6881326265222951171.post-5443659479814300264</id><published>2009-12-17T08:08:57.755+01:00</published><updated>2009-12-17T08:08:57.755+01:00</updated><title type='text'>http://rs371.rapidshare.com/files/233288217/MD5.ra...</title><content type='html'>http://rs371.rapidshare.com/files/233288217/MD5.rar &lt;br /&gt;&lt;br /&gt;is now invalid.  Could someone please provide a valid link to this?&lt;br /&gt;&lt;br /&gt;Also, could you please provide compile instructions for Linux for EmDeBr?&lt;br /&gt;&lt;br /&gt;Thanks for the great work!  :)</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/5443659479814300264'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/5443659479814300264'/><link rel='alternate' type='text/html' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html?showComment=1261033737755#c5443659479814300264' title=''/><author><name>Anonymous</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html' ref='tag:blogger.com,1999:blog-6881326265222951171.post-449255362579788574' source='http://www.blogger.com/feeds/6881326265222951171/posts/default/449255362579788574' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1592834132'/></entry><entry><id>tag:blogger.com,1999:blog-6881326265222951171.post-7895219950644055731</id><published>2009-05-15T22:43:00.000+02:00</published><updated>2009-05-15T22:43:00.000+02:00</updated><title type='text'>Hi Sascha, nice work you did there. It's great tha...</title><content type='html'>Hi Sascha, nice work you did there. It's great that you are allowed (and want) to publish source code! If you can keep up that speed, you might not only have the fastest CPU MD5 password cracker that is open source, but it might also be faster then the fastest closed source cracker (I guess for now that's still BarsWF).&lt;br /&gt;&lt;br /&gt;I browsed a little through your code, and at least it made me realize that I forgot to interlace the ROTATE_LEFT function. So at least for my MD5 brute forcer speed for VC compiled version went from 117 Mhashes/s to 135 Mhashes/s. Haven't tried the Intel compiler yet. So tnx for that.&lt;br /&gt;&lt;br /&gt;Good luck on finishing your brute forcer, 2 months should be enough time :)&lt;br /&gt;&lt;br /&gt;Are you also building a GPU version yourself? Care to share some information and statistics?&lt;br /&gt;Feel free to keep the me (and readers of this blog) up2date about your progress.</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/7895219950644055731'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/7895219950644055731'/><link rel='alternate' type='text/html' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html?showComment=1242420180000#c7895219950644055731' title=''/><author><name>Daniel Niggebrugge</name><uri>http://www.blogger.com/profile/02053201958307619797</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html' ref='tag:blogger.com,1999:blog-6881326265222951171.post-449255362579788574' source='http://www.blogger.com/feeds/6881326265222951171/posts/default/449255362579788574' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-739554971'/></entry><entry><id>tag:blogger.com,1999:blog-6881326265222951171.post-1024535497159101415</id><published>2009-05-15T16:58:00.000+02:00</published><updated>2009-05-15T16:58:00.000+02:00</updated><title type='text'>Hello Daniel,

I asked my prof. and he said that I...</title><content type='html'>Hello Daniel,&lt;br /&gt;&lt;br /&gt;I asked my prof. and he said that I am allowed to publish my code. ( I was not sure)&lt;br /&gt;But my program has the BETA-status, only passwordlength up to 7 chars, and only 26 different chars are used. ('a' - 'z')&lt;br /&gt;(I have still 2 months to finish my work ;-) )&lt;br /&gt;&lt;br /&gt;here is the link:&lt;br /&gt;http://rs371.rapidshare.com/files/233288217/MD5.rar&lt;br /&gt;&lt;br /&gt;If you have some questions, you can write me an Email to : Sascha-Pfaller@web.de</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/1024535497159101415'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/1024535497159101415'/><link rel='alternate' type='text/html' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html?showComment=1242399480000#c1024535497159101415' title=''/><author><name>Sascha Pfaller</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html' ref='tag:blogger.com,1999:blog-6881326265222951171.post-449255362579788574' source='http://www.blogger.com/feeds/6881326265222951171/posts/default/449255362579788574' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1047924353'/></entry><entry><id>tag:blogger.com,1999:blog-6881326265222951171.post-8098463404193444076</id><published>2009-05-11T20:58:00.000+02:00</published><updated>2009-05-11T20:58:00.000+02:00</updated><title type='text'>Hi Sascha, tnx for you comment. I actually have a ...</title><content type='html'>Hi Sascha, tnx for you comment. I actually have a version with more interlacing lying around already. I was still playing around with Intel compiler to see differences in speed.&lt;br /&gt;&lt;br /&gt;With my NTLM (MD4) brute forcer, I got best results by interlacing 4 times, with MD5 brute forcer it's with interlacing 3 times. This would strike me as odd, as I thought my cpu can execute 3 SSE2 instructions at the same time. After using Intel compiler, it was indeed 3 times that was just as fast. Apparently I just tricked Visual C's compiler to arrange instructions well enough to interlace 3x by actually writing the code as 4x.&lt;br /&gt;&lt;br /&gt;I must say that I am really surprised by the speeds you claim to reach, 210 Mhashes/s, as even with Intel compiler I only got like 144 Mhashes/s with my Q9450@3.2 GHz. Or is that the speed you reach with your own brute forcer? If so, great work! Will you be releasing code for it? :)&lt;br /&gt;&lt;br /&gt;(anyway, I'll release my better interlaced versions one of these days)</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/8098463404193444076'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/8098463404193444076'/><link rel='alternate' type='text/html' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html?showComment=1242068280000#c8098463404193444076' title=''/><author><name>Daniel Niggebrugge</name><uri>http://www.blogger.com/profile/02053201958307619797</uri><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html' ref='tag:blogger.com,1999:blog-6881326265222951171.post-449255362579788574' source='http://www.blogger.com/feeds/6881326265222951171/posts/default/449255362579788574' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-739554971'/></entry><entry><id>tag:blogger.com,1999:blog-6881326265222951171.post-8290118687543464348</id><published>2009-05-11T20:09:00.000+02:00</published><updated>2009-05-11T20:09:00.000+02:00</updated><title type='text'>Hello Daniel,

I am also programming an MD5-brutef...</title><content type='html'>Hello Daniel,&lt;br /&gt;&lt;br /&gt;I am also programming an MD5-bruteforcer.&lt;br /&gt;Its an project in our university. The goal is to show the "big" differences between the cpu and the gpu versions.&lt;br /&gt;After I analysed your sourcecode I found out that you can speed-up your version by the factor of 2.&lt;br /&gt;In your SSE2 interlaced part you only calculate 2 hashes at once, but the processor is capable to &lt;br /&gt;do 4 operations at the same time. (When the operations NOT depend an each other)&lt;br /&gt;&lt;br /&gt;Here is what I did:&lt;br /&gt;&lt;br /&gt;#define FOUR2_mFunc_FF(a1,a2,a3,a4,b1,b2,b3,b4,c1,c2,c3,c4,d1,d2,d3,d4,mess1,mess2,mess3,mess4,sin_, left_,right_, t1,t2,t3,t4)\&lt;br /&gt; mFunc_F(b1,c1,d1,t1);\&lt;br /&gt; mFunc_F(b2,c2,d2,t2);\&lt;br /&gt; mFunc_F(b3,c3,d3,t3);\&lt;br /&gt; mFunc_F(b4,c4,d4,t4);\&lt;br /&gt; M_Add(t1,mess1);\&lt;br /&gt; M_Add(t2,mess2);\&lt;br /&gt; M_Add(t3,mess3);\&lt;br /&gt; M_Add(t4,mess4);\&lt;br /&gt; M_Add(t1,sin_);\&lt;br /&gt; M_Add(t2,sin_);\&lt;br /&gt; M_Add(t3,sin_);\&lt;br /&gt; M_Add(t4,sin_);\&lt;br /&gt; M_Add(a1,t1);\&lt;br /&gt; M_Add(a2,t2);\&lt;br /&gt; M_Add(a3,t3);\&lt;br /&gt; M_Add(a4,t4);\&lt;br /&gt; M_Rotate_L(a1,left_,right_,t1);\&lt;br /&gt; M_Rotate_L(a2,left_,right_,t2);\&lt;br /&gt; M_Rotate_L(a3,left_,right_,t3);\&lt;br /&gt; M_Rotate_L(a4,left_,right_,t4);\&lt;br /&gt; M_Add(a1,b1);\&lt;br /&gt; M_Add(a2,b2);\&lt;br /&gt; M_Add(a3,b3);\&lt;br /&gt; M_Add(a4,b4);\&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;&lt;br /&gt;By doing so, i got over 210 mill. Hashes per second. (Q6600 with 3.2 Ghz)</content><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/8290118687543464348'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/6881326265222951171/449255362579788574/comments/default/8290118687543464348'/><link rel='alternate' type='text/html' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html?showComment=1242065340000#c8290118687543464348' title=''/><author><name>Sascha Pfaller</name><email>noreply@blogger.com</email><gd:image xmlns:gd='http://schemas.google.com/g/2005' rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img1.blogblog.com/img/blank.gif'/></author><thr:in-reply-to xmlns:thr='http://purl.org/syndication/thread/1.0' href='http://blog.distracted.nl/2009/05/emdebr-md5-password-brute-forcer.html' ref='tag:blogger.com,1999:blog-6881326265222951171.post-449255362579788574' source='http://www.blogger.com/feeds/6881326265222951171/posts/default/449255362579788574' type='text/html'/><gd:extendedProperty xmlns:gd='http://schemas.google.com/g/2005' name='blogger.itemClass' value='pid-1274237083'/></entry></feed>
