RE: Password Cracking Challenge...

From: David Schwartz <davids(at)webmaster.com>
Date: Mon Jul 28 2003 - 16:40:36 EDT

> Below is a list of password (case sensitive) together

        Two things:

1. You should have hashed a few of the shortest possible passwords, like 'a' and 'b' if the program would allow you to. At minimum, you should have hased passwords that are much more similar, like 'foo0' and 'foo1', or ideally '0' and '1'. You have no passwords that differ by only one character.
2. You need to tell people what it is they're working on. If we're going to help you compromise the security of something, we need to know what it is.

You don't mention whether this is an algorithm you constructed just for this challenge or whether it's a real algorithm.

        Also, it's obvious that the program divides the password into two portions and does a 64-bit hash of each. So the problem reduces to figuring out what 64-bit hashing function that is.

        DS Received on Mon Jul 28 17:18:07 2003