Limitations of hashcat approach for certain targets

[john_alan]

You don't. You don't get a hash.

If your algorithm involves a KDF, we just do the KDF step the same way you would, then do the decryption step on the encrypted cipher text and check if what we got is what we wanted/expected.

Makes sense thanks!