Ken Thompson Unix Password

Kumwe kunhu muna 2014, mumarara eBSD 3 sosi yemuti, ndakawana faira / etc / passwd nemapassword evese veterans vakadai saDennis Ritchie, Ken Thompson, Brian W. Kernighan, Steve Bourne naBill Joy.

Iyo algorithm yakashandiswa kune aya hashe yaive crypt(3) DES-yakavakirwa - inozivikanwa kuve isina kusimba (uye ine yakanyanya kureba password ye8 mavara). Saka ndakafunga kuti zvingava nyore kutsemura mapassword aya kuti tifare.

Isu tinotora standard bruters John и hashcat.

Nekukurumidza ndakatsemura mapassword mazhinji, mazhinji acho aive asina kusimba (zvinonakidza, bwk akashandisa password. /.,/.,, - zviri nyore kunyora paQWERTY keyboard).

Asi password yaKen yaive isingagoneki. Kunyangwe kutsvaga kwakazara kwemavara madiki uye nhamba (mazuva akati wandei muna 2014) hakuna kuburitsa mhedzisiro. Sezvo iyo algorithm yakagadzirwa naKen Thompson naRobert Morris, ndanga ndichinetseka kuti chii chikuru chaive. Ndakaona zvakare kuti, kana ndichienzaniswa nemamwe mapassword hashing scheme senge NTLM, crypt (3) inononoka kutyora (zvichida yakaderera optimized).

Akanyatsoshandisa mabhii makuru kana kuti mabhii chaiwo here? (7-bit yakazara brute simba inotora anopfuura makore maviri paGPU yemazuva ano).

Pakutanga kwaOctober nyaya iyi akamutswa zvakare patsamba yetsamba Iyo Unix Heritage Society,uye i akagovera mhinduro dzake uye kuodzwa mwoyo kuti aisakwanisa kupaza password yaKen.

Pakupedzisira nhasi Nigel Williams akaburitsa chakavanzika:

Kubva: Nigel Williams[email inodzivirirwa]>
Musoro: Re: [TUHS] Kudzoreredza /etc/passwd mafaera

Ken akagadzirira:

ZghOT0eRm4U9s:p/q2-q4!

Zvakatora mazuva anopfuura mana pa AMD Radeon Vega64 mune hashcat ingangoita 930MH/s (avo vari kuziva vanoziva kuti hashrate inoshanduka uye inodzikira kusvika kumagumo).

Uku ndiko kufamba kwekutanga kwepawn mativi maviri mukati descriptive notation uye kutanga mazarurwa akawanda akajairika, iyo inokodzera kwazvo mukati Kumashure kwaKen Thompson pakombuta chess.

Ndinofara zvikuru kuti chakavanzika chakagadziriswa, uye mhedzisiro yacho inofadza.

Source: www.habr.com