{"action":"created","issue":{"url":"https://api.github.com/repos/hashcat/hashcat/issues/565","repository_url":"https://api.github.com/repos/hashcat/hashcat","labels_url":"https://api.github.com/repos/hashcat/hashcat/issues/565/labels{/name}","comments_url":"https://api.github.com/repos/hashcat/hashcat/issues/565/comments","events_url":"https://api.github.com/repos/hashcat/hashcat/issues/565/events","html_url":"https://github.com/hashcat/hashcat/issues/565","id":186549567,"number":565,"title":"Increase salt length (generic)","user":{"login":"jsteube","id":10434361,"avatar_url":"https://avatars.githubusercontent.com/u/10434361?v=3","gravatar_id":"","url":"https://api.github.com/users/jsteube","html_url":"https://github.com/jsteube","followers_url":"https://api.github.com/users/jsteube/followers","following_url":"https://api.github.com/users/jsteube/following{/other_user}","gists_url":"https://api.github.com/users/jsteube/gists{/gist_id}","starred_url":"https://api.github.com/users/jsteube/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsteube/subscriptions","organizations_url":"https://api.github.com/users/jsteube/orgs","repos_url":"https://api.github.com/users/jsteube/repos","events_url":"https://api.github.com/users/jsteube/events{/privacy}","received_events_url":"https://api.github.com/users/jsteube/received_events","type":"User","site_admin":false},"labels":[{"id":295417778,"url":"https://api.github.com/repos/hashcat/hashcat/labels/help%20wanted","name":"help wanted","color":"159818","default":true},{"id":295417777,"url":"https://api.github.com/repos/hashcat/hashcat/labels/new%20feature","name":"new feature","color":"84b6eb","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-11-01T14:36:44Z","updated_at":"2016-11-01T14:45:31Z","closed_at":null,"body":"There have been several issues for this topic and I wanted to merge them so we have a single issue for discussion this.\r\n\r\nSo when I think of increasing salt length I think of this:\r\n\r\n* How much length is enough. It can't be unlimited (because GPU memory can't be dynamically allocated inside the kernel)\r\n* Do we really want to make this generic for all kernels or just the \"generic\" kernels like MD5($p.$s). It's not always usefull. For example, phpass always uses a 8 byte salt. \r\n* We'd need to rewrite \"generic\" kernels and add loops (much slower), plus the merkle demgard handling, but I wouldn't count this as a \"loss\" in speed\r\n* We'd need to rewrite many of the common.cl and host functions, propably removing manually unrolled code into (much slower) loops\r\n\r\nSo basically this is all about speed and it basically goes down to this one question I think:\r\n\r\n* Can we accept the performance loss, or, how much loss in percentage is acceptable?\r\n\r\nAny other ideas?"},"comment":{"url":"https://api.github.com/repos/hashcat/hashcat/issues/comments/257584986","html_url":"https://github.com/hashcat/hashcat/issues/565#issuecomment-257584986","issue_url":"https://api.github.com/repos/hashcat/hashcat/issues/565","id":257584986,"user":{"login":"jsteube","id":10434361,"avatar_url":"https://avatars.githubusercontent.com/u/10434361?v=3","gravatar_id":"","url":"https://api.github.com/users/jsteube","html_url":"https://github.com/jsteube","followers_url":"https://api.github.com/users/jsteube/followers","following_url":"https://api.github.com/users/jsteube/following{/other_user}","gists_url":"https://api.github.com/users/jsteube/gists{/gist_id}","starred_url":"https://api.github.com/users/jsteube/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsteube/subscriptions","organizations_url":"https://api.github.com/users/jsteube/orgs","repos_url":"https://api.github.com/users/jsteube/repos","events_url":"https://api.github.com/users/jsteube/events{/privacy}","received_events_url":"https://api.github.com/users/jsteube/received_events","type":"User","site_admin":false},"created_at":"2016-11-01T14:45:31Z","updated_at":"2016-11-01T14:45:31Z","body":"Some more discussion material:\r\n\r\nFrom @magnumripper \r\n\r\n> JtR core supports arbitrarily long salts but most optimized formats has a fairly tight limit just like Hashcat, to keep things in one or two Merkel Damgard blocks.\r\n> \r\n> This particular format is supported in JtR as dynamic_2009 (only CPU) with salt lengths up to 200 (same format with max. 23 bytes salt is dynamic_9 and it's obviously faster).\r\n\r\nFrom https://github.com/hashcat/hashcat/issues/79\r\n\r\n> A new limit on length to 35-40 on the most common algorithms\r\n\r\nFrom https://github.com/hashcat/hashcat/issues/95\r\n\r\n> SaltLen = 130\r\n\r\nFrom https://github.com/hashcat/hashcat/issues/442\r\n\r\n> ... whatever hashcat supports salt length 40 or not."}}
{"actor":{"display_login":"jsteube"}}