Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: for-q-clinton
My review of Rainbow Crack looks like it's a brute force method to crack. Not a dictionary attack; therefore, Linux hash is at as much risk as a Windows hash.

Read 426. Rainbow Crack is a brute force attack, but the brute force is calculated in advance by a bunch of computers adding to the lookup table. As of now it only does 14 characters, and could therefore not handle a salted password of any decent length if you count the salt simply as part of the password. I guess there is a small probability that it could run across a short, salted password that is in its lookup table. Any Linux password of greater than six characters (assuming an eight-character salt) would be outside its range, meaning it couldn't crack the average 8-character long password.

In any case, it's success rate on Linux would be nowhere near the 99.9% success rate it has on Windows passwords up to 14 characters in length.

441 posted on 08/30/2005 8:35:49 AM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 431 | View Replies ]


To: antiRepublicrat

wasn't it you that said Linux was using a 4 character salt? It may have been someone else.

But what size salt does the typical Linux build use?


443 posted on 08/30/2005 8:41:45 AM PDT by for-q-clinton (If at first you don't succeed keep on sucking until you do succeed)
[ Post Reply | Private Reply | To 441 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson