Ken Thompson Unix Password

Qee qhov hauv xyoo 2014, hauv cov pob tseg ntawm BSD 3 qhov chaw ntoo, kuv pom cov ntaub ntawv / etc / passwd nrog cov passwords ntawm txhua tus qub tub rog xws li Dennis Ritchie, Ken Thompson, Brian W. Kernighan, Steve Bourne thiab Bill Joy.

Cov algorithm siv rau cov hashes no yog crypto (3) DES-raws li - paub tias tsis muaj zog (thiab nrog tus password ntev tshaj plaws ntawm 8 cim). Yog li kuv xav tias nws yuav yooj yim tawg cov passwords rau kev lom zem.

Peb coj tus qauv bruters john ΠΈ hassab.

Heev sai kuv tawg ntau tus passwords, feem ntau ntawm cov uas tsis muaj zog heev (interestingly, bwk siv tus password. /.,/.,, - nws yooj yim los ntaus ntawm QWERTY keyboard).

Tab sis Ken tus password yog uncrackable. Txawm tias kev tshawb nrhiav tag nrho cov tsiaj ntawv me thiab cov lej (ntau hnub hauv 2014) tsis tau ua tiav. Txij li thaum lub algorithm tau tsim los ntawm Ken Thompson thiab Robert Morris, kuv xav tsis thoob tias qhov loj yog dab tsi. Kuv kuj pom tau hais tias, piv rau lwm tus password hashing schemes zoo li NTLM, crypt(3) yog qhov qeeb qeeb (tej zaum tsawg dua).

Nws puas tau siv cov tsiaj ntawv loj lossis cov cim tshwj xeeb? (7-ntsis tag nrho brute quab yuam yuav siv sijhawm ntau dua ob xyoos ntawm GPU niaj hnub).

Thaum pib lub kaum hli ntuj no lub ntsiab lus tsa dua ntawm daim ntawv xa ntawv Lub Unix Heritage Society, thiab kuv qhia nws cov txiaj ntsig thiab poob siab tias nws tsis tuaj yeem tawg Ken tus password.

Thaum kawg hnub no Nigel Williams tau qhia qhov zais cia:

Los ntawm: Nigel Williams[email tiv thaiv]>
Subject: Re: [TUHS] Recovering /etc/passwd files

Ken npaj txhij:

ZghOT0eRm4U9s:p/q2-q4!

Nws siv sijhawm ntau tshaj plaub hnub ntawm AMD Radeon Vega64 hauv hashcat ntawm txog 930MH / s (cov neeg paub paub tias qhov hashrate hloov pauv thiab txo qis mus rau qhov kawg).

Qhov no yog thawj qhov txav ntawm pawn ob squares rau hauv piav qhia thiab qhov pib ntau yam qhib, uas fits zoo heev rau hauv Ken Thompson keeb kwm ntawm computer chess.

Kuv zoo siab heev tias qhov kev paub tsis meej tau raug daws, thiab cov txiaj ntsig tau zoo heev.

Tau qhov twg los: www.hab.com

Ntxiv ib saib