Ma kahi o 2014, i loko o nā waihona o ka kumu kumu kumu BSD 3, loaʻa iaʻu kahi faila me nā ʻōlelo huna a nā mea kahiko a pau e like me Dennis Ritchie, Ken Thompson, Brian W. Kernighan, Steve Bourne a me Bill Joy.
ʻO ka algorithm i hoʻohana ʻia no kēia mau hashes Hoʻokumu ʻia DES - ʻike ʻia he nāwaliwali (a me ka lōʻihi o ka ʻōlelo huna o 8 mau huaʻōlelo). No laila, manaʻo wau he mea maʻalahi ke haki i kēia mau ʻōlelo huna no ka leʻaleʻa.
Lawe mākou i nā bruters maʻamau и .
ʻAʻole wikiwiki wau i haki i nā ʻōlelo huna he nui, ʻo ka hapa nui o ia mau mea nāwaliwali loa (ʻo ka hoihoi, ua hoʻohana ʻo bwk i ka ʻōlelo huna. /.,/.,, - he maʻalahi ke paʻi ʻana ma kahi kīwī QWERTY).
Akā ʻaʻole hiki ke wehe ʻia ka ʻōlelo huna a Ken. ʻO ka huli piha ʻana i nā leka liʻiliʻi a me nā helu (he mau lā ma 2014) ʻaʻole i loaʻa nā hopena. Ma muli o ka hoʻomohala ʻana o ka algorithm e Ken Thompson lāua ʻo Robert Morris, ua noʻonoʻo wau i ka mea nui. Ua ʻike nō hoʻi au, i ka hoʻohālikelike ʻia me nā ʻōnaehana hashing password ʻē aʻe e like me NTLM, ʻoi aku ka lohi o ka crypt (3) i ka haki (ʻaʻole paha i hoʻopaʻa ʻia).
Ua hoʻohana maoli ʻo ia i nā huaʻōlelo nui a i ʻole nā kiʻi kūikawā paha? (7-bit piha ʻoi aku ka ikaika ma mua o ʻelua mau makahiki ma kahi GPU hou).
I ka hoʻomaka ʻana o ʻOkakopa i kēia kumuhana ma ka papa inoa leka , a ʻo wau a me ka hōʻeha ʻole ʻaʻole hiki iā ia ke uha i ka ʻōlelo huna a Ken.
I ka hopena i kēia lā ua hōʻike ʻo Nigel Williams i ka mea huna:
Mai: Nigel Williams[pale ʻia ka leka uila]>
Kaupapa: Re: [TUHS] Hoʻihoʻi hou i nā faila /etc/passwdUa mākaukau ʻo Ken:
ZghOT0eRm4U9s:p/q2-q4!
Ua ʻoi aku ma mua o ʻehā mau lā ma kahi AMD Radeon Vega64 i ka hashcat ma kahi o 930MH/s (ua ʻike ka poʻe i ka ʻike i ka piʻi ʻana o ka hashrate a emi iho i ka hopena).
ʻO kēia ka neʻe mua ʻana o kahi pawn ʻelua ʻāpana i loko a me ka hoomaka ana , i kūpono loa i loko .
Hauʻoli nui wau i ka hoʻoholo ʻana o ka mea pohihihi, a ʻoluʻolu loa ka hopena.
Source: www.habr.com