Hacker News Reader

I cracked a lot of sha512crypt and PBKDF2-HMAC-SHA256 hashes with a cheap GPU at Defcon this year. Here's the write-up.

(Cracking Passwords with Cheap Hardware at Defcon):

https://github.com/62726164/cmiyc2020

Do I understand correctly that you cracked about half of the 12,000-iteration PBKDF2 hashes using a first-gen ThreadRipper and a GTX 1060, and would have cracked more except for a formatting problem in the hashes? That's eye opening.

Is Word Machine publicly available, or is it the sort of thing that has an audience of one?

Yes, that's right. I may have not cracked them during the contest (but just after). I don't recall. Once I figured out the pattern, I could attack it much more efficiently. So, it's not as impressive as it seems.

And, unfortunately, wm has an audience of one. Mostly because I'm ashamed to share it.

Reply on news.ycombinator.com