SHA256 bug when salt is really big?
#8
I apologize if my initial posting was not clear enough:

when trying to find the password just for 1 hash (with the long salt) it works fine!

So, in your example you have in your hash file "example_hash" the following hash:
1234567:756d043c22902e67d2696f5bd689a9328828cda937f3fc7a6bdd568c7ea272e4:5B40333​62044697274792C2055676C7920616E642046696C746879206F6C64206D656E21235D

As you correctly point out, oclhashcat finds the password


Now, replace in your hash file "example_hash" the previous hash with this one:
1111111:043023a9f4d3eaf068c4945bc2918670e6b480946113958c89cd62e678b27ffc:5B40333​62044697274792C2055676C7920616E642046696C746879206F6C64206D656E21235D

Run oclhashcat again and it also finds the password.
So, we have 2 different hashes which INDIVIDUALLY oclhashcat successfully finds the passwords.



Next, put in your hash file "example_hash" BOTH the hashes:

1234567:756d043c22902e67d2696f5bd689a9328828cda937f3fc7a6bdd568c7ea272e4:5B40333​62044697274792C2055676C7920616E642046696C746879206F6C64206D656E21235D
1111111:043023a9f4d3eaf068c4945bc2918670e6b480946113958c89cd62e678b27ffc:5B40333​62044697274792C2055676C7920616E642046696C746879206F6C64206D656E21235D


Run oclhashcat. THIS TIME IT FAILS FOR BOTH!!
So, when run on a single hash it works, when it runs for both it fails.

Is it more clear now?


Messages In This Thread
SHA256 bug when salt is really big? - by john2014 - 02-13-2014, 08:27 PM
RE: SHA256 bug when salt is really big? - by john2014 - 02-13-2014, 09:19 PM