{"id":33910,"date":"2019-10-31T21:55:20","date_gmt":"2019-10-31T18:55:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vypusk-john-the-ripper-1-9-0-jumbo-1-s-podderzhkoj-fpga\/"},"modified":"2019-10-31T21:55:20","modified_gmt":"2019-10-31T18:55:20","slug":"vypusk-john-the-ripper-1-9-0-jumbo-1-s-podderzhkoj-fpga","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-john-the-ripper-1-9-0-jumbo-1-s-podderzhkoj-fpga","title":{"rendered":"Vydanie John the Ripper 1.9.0-jumbo-1 s podporou FPGA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vydan\u00e1<\/a><\/noindex> nov\u00e1 verzia najstar\u0161ieho podporovan\u00e9ho programu na v\u00fdber hesiel John the Ripper 1.9.0-jumbo-1<\/a><\/noindex> (projekt sa vyv\u00edja od roku 1996). Od vydania predch\u00e1dzaj\u00facej verzie 1.8.0-jumbo-1 uplynulo 4,5 roka, po\u010das ktor\u00fdch bolo vykonan\u00fdch viac ako 6000 zmien (git commits) od viac ako 80 v\u00fdvoj\u00e1rov. V\u010faka nepretr\u017eitej integr\u00e1cie<\/a><\/noindex>, vr\u00e1tane predbe\u017enej overovania ka\u017ed\u00e9ho zmeny (pull request) na mnoh\u00fdch platform\u00e1ch, po\u010das tohto obdobia v\u00fdvoj\u00e1ri odpor\u00fa\u010dali pou\u017e\u00edva\u0165 aktu\u00e1lnu ed\u00edciu z GitHubu<\/a><\/noindex>, ktor\u00e9ho stav bol stabiln\u00fd napriek vykonan\u00fdm zmen\u00e1m. Hlavn\u00fd k\u00f3d projektu distribuovan\u00fd<\/a><\/noindex> je pod licenciou GPLv2+, pri\u010dom k\u00f3d niektor\u00fdch komponentov je pod licenciou BSD. <\/p>\n

Rysom novej verzie je podpora FPGA (okrem CPU, GPU a Xeon Phi). Pre dosky ZTEX 1.15y<\/a><\/noindex>, ktor\u00e9 obsahuj\u00fa 4 \u010dipy FPGA a p\u00f4vodne sa pou\u017e\u00edvali hlavne na \u0165a\u017ebu Bitcoin, je teraz realizovan\u00fdch 7 typov hash hesiel: bcrypt, klasick\u00fd descrypt (vr\u00e1tane bigcrypt), sha512crypt, sha256crypt, md5crypt (vr\u00e1tane Apache apr1 a AIX smd5), Drupal7 a phpass (pou\u017e\u00edvan\u00fd najm\u00e4 vo WordPress). Niektor\u00e9 z nich s\u00fa implementovan\u00e9 na FPGA po prv\u00fdkr\u00e1t. <\/p>\n

Pre v\u00fdkon bcrypt sa dosiahlo ~119k c\/s pri 2^5 iter\u00e1ci\u00e1ch («$2b$05») s odberom pribli\u017ene ~27 wattov, \u010do podstatne prekra\u010duje v\u00fdsledky najnov\u0161\u00edch GPU, pokia\u013e ide o dosku, cenu zariadenia a v\u00fdkon na watt. Podporovan\u00e9 s\u00fa tie\u017e klastre<\/a><\/noindex> z t\u00fdchto typov dosiek, \u010do bolo overen\u00e9 a\u017e do 16 dosiek (64 \u010dipov FPGA) ovl\u00e1dan\u00fdch z jedn\u00e9ho Raspberry Pi 2. Podporuje sa be\u017en\u00e1 funk\u010dnos\u0165 John the Ripper, vr\u00e1tane v\u0161etk\u00fdch re\u017eimov v\u00fdberu hesiel a s\u00fabe\u017en\u00e9ho na\u010d\u00edtania ve\u013ek\u00e9ho mno\u017estva hashov. <\/p>\n

Na zr\u00fdchlenie prev\u00e1dzky sa implementovalo pou\u017eitie masky (re\u017eim «—mask», vr\u00e1tane kombin\u00e1ci\u00ed s \u010fal\u0161\u00edmi re\u017eimami) a porovn\u00e1vanie vypo\u010d\u00edtan\u00fdch hashov s t\u00fdmi nahran\u00fdmi na strane FPGA. Z realiza\u010dn\u00e9ho h\u013eadiska, vo viacer\u00fdch dizajnoch (napr\u00edklad pre sha512crypt a Drupal7<\/a><\/noindex>) pou\u017eit\u00e9 bloky pozost\u00e1vaj\u00face z viacvl\u00e1knov\u00fdch procesorov\u00fdch jadier (soft CPU cores), ktor\u00e9 komunikuj\u00fa s kryptografick\u00fdmi jadrami. V\u00fdvoj tejto funkcionality viedol Denis Burikin v koordin\u00e1cii s \u010fal\u0161\u00edmi v\u00fdvoj\u00e1rmi jumbo.<\/p>\n

In\u00e9 d\u00f4le\u017eit\u00e9 zmeny:<\/p>\n