Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

-m 15300 reworked + splitted in 15300/15900 #1365

Merged
merged 3 commits into from
Sep 21, 2017

Conversation

Fist0urs
Copy link
Contributor

Hi fellow hash crackers,

I splitted my implementation of DPAPI masterkey file in hashcat in 2 separate formats:

  • 15300, for masterkey file v1
  • 15900, for masterkey file v2

Performances should not be impacted (a bit better though, as a conditionnal branchment was removed in the __loop workload) but this is better for visibility and real performances evaluation while doing benchmarks.
Indeed version 1, which concerns DPAPI until Microsoft Vista (and workstations that migrated from XP or Vista), is using hmac-sha1 and 3DES, whereas version 2, which concerns DPAPI beginning with 7, is using hmac-sha512 and AES256.
Thus perfomances vary between these 2 versions (even if the Windows 10 client version is not that worse compared with Vista, which is quite a fail...).

Cheers!

PS: all tests have been successfully passed with test.pl

@Fist0urs Fist0urs force-pushed the DPAPI_reworked branch 2 times, most recently from 9b92a7d to 92e41fe Compare September 21, 2017 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants