• AS/400 DES
  
• AS/400 SSHA1
  
• Blockchain, My Wallet, Legacy Wallets
  
• Cisco-ISE Hashed Password (SHA256)
  
• LUKS2 (Argon2i KDF type)
  
• KeePass (KDBX v4)
  
• SAP CODVN H (PWDSALTEDHASH) isSHA512
  
• sm3crypt $sm3$, SM3 (Unix)
  
• BLAKE2b-256
  
• BLAKE2b-256($pass.$salt)
  
• BLAKE2b-256($salt.$pass)
  
• MD6 (256)
  
• sha224($pass.$salt)
  
• sha224($salt.$pass)
  
• sha224(sha1($pass))
  
• sha224(sha224($pass))
  

• Attack-Modes: Use 64-bit counters for amplifier keyspace
  
• Host Memory: Update method to query free host memory
  
• Add initial support for running hashcat inside Docker
  
• Device Memory: Warn instead of waiting on high GPU memory usage
  
• ... a lot more
  
• See full writeup for details
  

• Integer overflow detected in ...
  
• Not enough allocatable device memory or free host memory ...
  

• Fix unsalted hashlist support
  
• Fix the esalt structure, it was too large
  
• Improve support from 1:1 password-to-hash to 1:N password-to-hashes
  
• Improve stand-alone debugging of Python Bridge stubs
  
• See full writeup for details
  

• Over 900,000 lines of code changed
  
• Contributions from 105 developers, including 74 first-time contributors
  
• Merged and documented all previously unannounced 6.2.x features
  

• Assimilation Bridge: Integrate external resources like CPUs, FPGAs, embedded interpreters, and more into the cracking pipeline.
  
• Python Bridge Plugin: Rapidly implement hash-matching logic in Python. No recompilation needed, supports multithreading and rule engine by default.
  
• Virtual Backend Devices: Internally partitions physical GPUs into multiple logical devices for better bridge integration and async workloads.
  
• Hash-Mode Autodetection: Omit the -m flag and let Hashcat detect the hash-mode, or use --identify to list possibilities.
  
• Docker Build Support: Build Hashcat in a fully containerized, cross-platform environment, including cross-compilation to Windows.
  

• 58 new application-specific hash types, including Argon2, MetaMask, Microsoft Online Account, SNMPv3, GPG, OpenSSH, and LUKS2
  
• 17 new generic hash constructions used in real-world web apps and protocols
  
• 11 new primitives added to the crypto library, improving reuse and plugin development
  
• 20 new tools to extract hashes from popular sources, including APFS, Virtualbox, BitLocker, and various wallet formats
  

• Complete refactor of the autotuning engine for better device utilization
  
• Major rewrite of memory management to eliminate previous 4GB allocation caps and enable full memory usage across devices
  
• Improved tuning for hash-modes like NTLM, NetNTLMv2, and RAR3
  
• Updated tuning database entries and lower overhead for multi-device setups
  
• Optimizations to several individual hash-modes including:
  • scrypt: up to +320 percent
    
  • RAR3: up to +54 percent
    
  • NetNTLMv2: +223 percent (Intel)
    

• HIP (AMD): First-class support for AMD's HIP backend, now preferred over OpenCL when both are available
  
• Metal (Apple): Native GPU support on macOS using Metal, including full Apple Silicon compatibility and major speed improvements
  

• Improved diagnostics, tokenizer control, and debugging options
  
• New reusable infrastructure for integrating algorithms directly into both modules and kernels
  
• Expanded test coverage, edge-case detection, and cross-platform compatibility improvements
  

• Support for new character class logic and rejection rules, increasing rule engine flexibility
  
• Refactored and cleaned up rule logic to improve reliability
  
• Several commonly used rule files have been optimized and expanded
  

• Mask engine now supports 8 custom charsets (-5 to -8)
  
• Status screen improvements: better kernel info, new keybind support, improved quiet mode
  
• New output formats: JSON support added to status and info commands
  
• Improved benchmark defaults: better masks, longer duration, more consistent output
  
• Updated 3rd-party dependencies and build fixes across all platforms
  
• Added handling for compressed wordlists and better I/O error recovery
  
• False-positive mitigation improvements across multiple formats
  

• Resolved memory allocation and buffer size issues across backends
  
• Fixed bugs in output handling, restore files, and mask parsing
  
• Corrected behavior for complex attack modes under edge conditions
  
• Fixed missing or broken hash extractions for multiple formats
  
• Eliminated false negatives in rare multihash cases
  

• Added hash-mode: Apple iWork
  
• Added hash-mode: AxCrypt 2 AES-128
  
• Added hash-mode: AxCrypt 2 AES-256
  
• Added hash-mode: BestCrypt v3 Volume Encryption
  
• Added hash-mode: Bitwarden
  
• Added hash-mode: Dahua Authentication MD5
  
• Added hash-mode: KNX IP Secure - Device Authentication Code
  
• Added hash-mode: MongoDB ServerKey SCRAM-SHA-1
  
• Added hash-mode: MongoDB ServerKey SCRAM-SHA-256
  
• Added hash-mode: Mozilla key3.db
  
• Added hash-mode: Mozilla key4.db
  
• Added hash-mode: MS Office 2016 - SheetProtection
  
• Added hash-mode: PDF 1.4 - 1.6 (Acrobat 5 - 8) - edit password
  
• Added hash-mode: PKCS#8 Private Keys
  
• Added hash-mode: RAR3-p (Compressed)
  
• Added hash-mode: RAR3-p (Uncompressed)
  
• Added hash-mode: RSA/DSA/EC/OPENSSH Private Keys
  
• Added hash-mode: SolarWinds Orion v2
  
• Added hash-mode: SolarWinds Serv-U
  
• Added hash-mode: SQLCipher
  
• Added hash-mode: Stargazer Stellar Wallet XLM
  
• Added hash-mode: Stuffit5
  
• Added hash-mode: Telegram Desktop >= v2.1.14 (PBKDF2-HMAC-SHA512)
  
• Added hash-mode: Umbraco HMAC-SHA1
  
• Added hash-mode: sha1($salt.sha1($pass.$salt))
  
• Added hash-mode: sha1(sha1($pass).$salt)
  

• Added new attack-mode: Association Attack (aka "Context Attack") to attack hashes from a hashlist with associated "hints"
  
• Added support for true UTF-8 to UTF-16 conversion in kernel crypto library
  
• Added option --hash-info to show generic information for each hash-mode
  
• Added command prompt [f]inish to tell hashcat to quit after finishing the current attack
  

• Fixed access to filename which is a null-pointer in benchmark mode
  
• Fixed both false negative and false positive results in -m 3000 in -a 3 (affecting only NVIDIA GPU)
  
• Fixed buffer overflow in -m 1800 in -O mode which is optimized to handle only password candidates up to length 15
  
• Fixed buffer overflow in -m 4710 in -P mode and only in single hash mode if salt length is larger than 32 bytes
  
• Fixed hardware management sysfs readings in status screen (typically ROCm controlled GPUs)
  
• Fixed include guards in several header files
  
• Fixed incorrect maximum password length support for -m 400 in optimized mode (reduced from 55 to 39)
  
• Fixed internal access on module option attribute OPTS_TYPE_SUGGEST_KG with the result that it was unused
  
• Fixed invalid handling of outfile folder entries for -m 22000
  
• Fixed memory leak causing problems in sessions with many iterations - for instance, --benchmark-all or large mask files
  
• Fixed memory leaks in several cases of errors with access to temporary files
  
• Fixed NVML initialization in WSL2 environments
  
• Fixed out-of-boundary reads in cases where user activates -S for fast but pure hashes in -a 1 or -a 3 mode
  
• Fixed out-of-boundary reads in kernels using module_extra_buffer_size() if -n is set to 1
  
• Fixed password reassembling for cracked hashes on host for slow hashes in optimized mode that are longer than 32 characters
  
• Fixed race condition in potfile check during removal of empty hashes
  
• Fixed race condition resulting in out of memory error on startup if multiple hashcat instances are started at the same time
  
• Fixed rare case of misalignment of the status prompt when other user warnings are shown in the hashcat output
  
• Fixed search of tuning database - if a device was not assigned an alias, it couldn't be found in general
  
• Fixed test on gzip header in wordlists and hashlists
  
• Fixed too-early execution of some module functions that use non-final values opts_type and opti_type
  
• Fixed unexpected non-unique salts in multi-hash cracking in Bitcoin/Litecoin wallet.dat module which led to false negatives
  
• Fixed unit test for -m 3000 by preventing it to generate zero hashes
  
• Fixed unit tests using 'null' as padding method in Crypt::CBC but actually want to use 'none'
  
• Fixed unterminated salt buffer in -m 23400 module_hash_encode() in case salt was of length 256
  
• Fixed vector datatype support in -m 21100 only -P mode and only -a 3 mode were affected
  

• Apple Keychain: Notify the user about the risk of collisions / false positives
  
• CUDA Backend: Do not warn about missing CUDA SDK installation if --backend-ignore-cuda is used
  
• CUDA Backend: Give detailed warning if either the NVIDIA CUDA or the NVIDIA RTC library cannot be initialized
  
• CUDA Backend: Use blocking events to avoid 100% CPU core usage (per GPU)
  
• OpenCL Runtime: Workaround JiT compiler deadlock on NVIDIA driver >= 465.89
  
• OpenCL Runtime: Workaround JiT compiler segfault on legacy AMDGPU driver compiling RAR3 OpenCL kernel
  
• RAR3 Kernels: Improved loop code, improving performance by 23%
  
• Scrypt Kernels: Added a number of GPU specific optimizations per hash modes to hashcat.hctune
  
• Scrypt Kernels: Added detailed documentation on device specific tunings in hashcat.hctune
  
• Scrypt Kernels: Optimized Salsa code portion by reducing register copies and removed unnecessary byte swaps
  
• Scrypt Kernels: Reduced kernel wait times by making it a true split kernel where iteration count = N value
  
• Scrypt Kernels: Refactored workload configuration strategy based on available resources
  
• Startup time: Improved startup time by avoiding some time-intensive operations for skipped devices
  

• Bcrypt: Make BCRYPT entry for CPU in hashcat.hctune after switch to OPTS_TYPE_MP_MULTI_DISABLE (basically set -n to 1)
  
• Benchmark: Update benchmark_deep.pl with new hash modes added (also new hash modes which were added with v6.1.0)
  
• Building: Declare phony targets in Makefile to avoid conflicts of a target name with a file of the same name
  
• Building: Fixed build warnings on macOS for unrar sources
  
• Building: Fixed test for DARWIN_VERSION in Makefile
  
• Commandline Options: Removed option --example-hashes, now an alias of --hash-info
  
• Compute API: Skipping devices instead of stop if error occured in initialization
  
• Documentation: Added 3rd party licenses to docs/license_libs
  
• Hash-Mode 8900 (Scrypt): Changed default benchmark scrypt parameters from 1k:1:1 to 16k:8:1 (default)
  
• Hash-Mode 11600 (7-Zip): Improved memory handling (alloc and free) for the hook function
  
• Hash-Mode 13200 (AxCrypt): Changed the name to AxCrypt 1 to avoid confusion
  
• Hash-Mode 13300 (AxCrypt in-memory SHA1): Changed the name to AxCrypt 1 in-memory SHA1
  
• Hash-Mode 16300 (Ethereum Pre-Sale Wallet, PBKDF2-HMAC-SHA256): Use correct buffer size allocation for AES key
  
• Hash-Mode 20710 (sha256(sha256($pass).$salt)): Removed unused code and fixed module_constraints
  
• Hash-Mode 22000 (WPA-PBKDF2-PMKID+EAPOL): Support loading a hash from command line
  
• Hash-Mode 23300 (Apple iWork): Use correct buffer size allocation for AES key
  
• Hash Parser: Output support for machine-readable hash lines in --show and --left and in error messages
  
• Kernel Development: Kernel cache is disabled automatically when hashcat is compiled with DEBUG=1
  
• Kernel Functions: Added generic AES-GCM interface see OpenCL/inc_cipher_aes-gcm.h
  
• Kernel Functions: Refactored OpenCL/inc_ecc_secp256k1.cl many functions, add constants and documentation
  
• Kernel Functions: Refactored OpenCL/inc_ecc_secp256k1.cl to improve usage in external programs
  
• Kernel Functions: Wrap atomic functions with hc_ prefix. Custom kernels need to rename "atomic_inc()" to "hc_atomic_inc()"
  
• Kernel Parameters: Added new parameter 'salt_repeat' to improve large buffer management
  
• Module Parameters: Add OPTS_TYPE_MP_MULTI_DISABLE for use by plugin developers to prevent multiply -n with the MCU count
  
• Module Parameters: Add OPTS_TYPE_NATIVE_THREADS for use by plugin developers to enforce native thread count
  
• Module Structure: Add 3rd party library hook management functions. This also requires an update to all existing module_init()
  
• OpenCL Runtime: Add support for clUnloadPlatformCompiler() to release some resources after JiT compilation
  
• OpenCL Runtime: Switched default OpenCL device type on macOS from GPU to CPU. Use -D 2 to enable GPU devices
  
• OpenCL Runtime: Update module_unstable_warnings() for all hash modes based on most recent versions of many OpenCL runtimes
  
• Unit tests: Added 'potthrough' (like passthrough, but hash:plain) to tools/test.pl
  
• Unit tests: Added Python 3 support for all of the Python code in our test framework
  
• Unit tests: Fixed the packaging of test (-p) feature
  
• Unit tests: Updated test.sh to show kernel type (pure or optimized) in output
  
• Unit tests: Use python3/pip3 instead of just python/pip in tools/install_modules.sh
  

• Added hash-mode: Apple Keychain
  
• Added hash-mode: XMPP SCRAM
  

• Fixed integer overflow for large masks in -a 6 attack mode
  
• Fixed alias detection with additional processor core count check
  
• Fixed maximum password length in modules of hash-modes 600, 7800, 7801 and 9900
  
• Fixed non-zero status code when using --stdout
  
• Fixed uninitialized value in bitsliced DES kernel (BF mode only) leading to false negatives
  

• Compile ZLIB: Fixed makefile include paths in case USE_SYSTEM_ZLIB is used
  
• Compile macOS: Fixed makefile target 'clean' to correctly remove *.dSYM folders
  
• OpenCL Kernels: Added datatypes to literals of enum costants
  
• OpenCL Kernels: Added pure kernels for hash-mode 600 (BLAKE2b-512)
  
• OpenCL Runtime: Reinterpret return code CL_DEVICE_NOT_FOUND from clGetDeviceIDs() as non-fatal
  
• OpenCL Runtime: Add some unstable warnings for some SHA512 based algorithms on AMD GPU on macOS
  

• Backend: Changed the maximum number of compute devices from 64 to 128
  
• Tests: Improved tests for hash-mode 11300 (Bitcoin/Litecoin wallet.dat)
  
• Tests: Improved tests for hash-mode 13200 (AxCrypt)
  
• Tests: Improved tests for hash-mode 13600 (WinZip)
  
• Tests: Improved tests for hash-mode 16400 (CRAM-MD5 Dovecot)
  
• Tests: Improved tests for hash-mode 16800 (WPA-PMKID-PBKDF2)
  

• New plugin interface - for modular hash-modes
  
• New compute-backend API interface - for adding compute APIs other than OpenCL
  
• CUDA added as a new compute-backend API
  
• Comprehensive plugin developer guide
  
• GPU Emulation mode - for using kernel code on the host CPU
  
• Better GPU memory and thread management
  
• Improved auto-tuning based on available resources
  

• AES Crypt (SHA256)
  
• Android Backup
  
• AuthMe sha256
  
• BitLocker
  
• BitShares v0.x
  
• Blockchain, My Wallet, Second Password (SHA256)
  
• Citrix NetScaler (SHA512)
  
• DiskCryptor
  
• Electrum Wallet (Salt-Type 3-5)
  
• Huawei Router sha1(md5($pass).$salt)
  
• Java Object hashCode()
  
• Kerberos 5 Pre-Auth etype 17 (AES128-CTS-HMAC-SHA1-96)
  
• Kerberos 5 Pre-Auth etype 18 (AES256-CTS-HMAC-SHA1-96)
  
• Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)
  
• Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)
  
• MultiBit Classic .key (MD5)
  
• MultiBit HD (scrypt)
  
• MySQL $A$ (sha256crypt)
  
• Open Document Format (ODF) 1.1 (SHA-1, Blowfish)
  
• Open Document Format (ODF) 1.2 (SHA-256, AES)
  
• Oracle Transportation Management (SHA256)
  
• PKZIP archive encryption
  
• PKZIP Master Key
  
• Python passlib pbkdf2-sha1
  
• Python passlib pbkdf2-sha256
  
• Python passlib pbkdf2-sha512
  
• QNX /etc/shadow (MD5)
  
• QNX /etc/shadow (SHA256)
  
• QNX /etc/shadow (SHA512)
  
• RedHat 389-DS LDAP (PBKDF2-HMAC-SHA256)
  
• Ruby on Rails Restful-Authentication
  
• SecureZIP AES-128
  
• SecureZIP AES-192
  
• SecureZIP AES-256
  
• SolarWinds Orion
  
• Telegram Desktop App Passcode (PBKDF2-HMAC-SHA1)
  
• Telegram Mobile App Passcode (SHA256)
  
• Web2py pbkdf2-sha512
  
• WPA-PBKDF2-PMKID+EAPOL
  
• WPA-PMK-PMKID+EAPOL
  
• md5($salt.sha1($salt.$pass))
  
• md5(sha1($pass).md5($pass).sha1($pass))
  
• md5(sha1($salt).md5($pass))
  
• sha1(md5(md5($pass)))
  
• sha1(md5($pass.$salt))
  
• sha1(md5($pass).$salt)
  
• sha1($salt1.$pass.$salt2)
  
• sha256(md5($pass))
  
• sha256($salt.$pass.$salt)
  
• sha256(sha256_bin($pass))
  
• sha256(sha256($pass).$salt)
  

• MD5: 8.05%
  
• NTLM: 13.70%
  
• Domain Cached Credentials (DCC), MS Cache: 11.91%
  
• Domain Cached Credentials 2 (DCC2), MS Cache 2: 12.51%
  
• NetNTLMv1: 15.79%
  
• NetNTLMv2: 6.98%
  
• WPA/WPA2: 13.35%
  
• sha256crypt $5$, SHA256 (Unix): 8.77%
  
• sha512crypt $6$, SHA512 (Unix): 20.33%
  
• bcrypt: 45.58%
  
• IPMI2 RAKP HMAC-SHA1: 20.03%
  
• SAP CODVN B (BCODE): 32.37%
  
• Blockchain, My Wallet: 31.00%
  
• Electrum Wallet (Salt-Type 1-3): 109.46%
  
• WinZip: 119.43%
  

• For complex kernels with lots of code, it's easier to debug the code on the host side as a standalone project. This also saves long startup times and increases development speed.
  
• Reuse complex kernel code from within the module. A good example is WPA EAPOL/PMKID, where we compute the last steps in the module parser with the goal to find already cracked hashes in the potfile. This saves maintaining the same code on two ends.
  
• Reuse kernel code in order to precompute values in parsers. As a very easy example, consider some "flawed" algo that uses md5($salt) within the algorithm. In this case we could just precompute this MD5 in the host.
  

• Refactored hash-mode integration and replaced it with a fully modularized plugin interface
  
• Converted all existing hardwired hash-modes to hashcat plugins
  
• Added comprehensive plugin developer guide on adding new/custom hash-modes to hashcat
  
• Refactored compute backend interface to allow adding compute API other than OpenCL
  
• Added CUDA as a new compute backend (enables hashcat to run on NVIDIA Jetson, IBM POWER9 w/ Nvidia V100, etc.)
  
• Support automatic use of all available GPU memory when using CUDA backend
  
• Support automatic use of all available CPU cores for hash-mode-specific hooks
  
• Support on-the-fly loading of compressed wordlists in zip and gzip format
  
• Support deflate decompression for the 7-Zip hash-mode using zlib hook
  
• Added additional documentation on hashcat brain, slow-candidate interface and keyboard-layout mapping features
  
• Keep output of --show and --left in the original ordering of the input hash file
  
• Improved performance of many hash-modes
  

• Fixed buffer overflow in build_plain() function
  
• Fixed buffer overflow in mp_add_cs_buf() function
  
• Fixed calculation of brain-session ID - only the first hash of the hashset was taken into account
  
• Fixed cleanup of password candidate buffers on GPU as set from autotune when -n parameter was used
  
• Fixed copy/paste error leading to invalid "Integer overflow detected in keyspace of mask" in attack-mode 6 and 7
  
• Fixed cracking multiple Office hashes (modes 9500, 9600) if hashes shared the same salt
  
• Fixed cracking of Blockchain, My Wallet (V1 and V2) hashes when testing decrypted data in unexpected format
  
• Fixed cracking of Cisco-PIX and Cisco-ASA MD5 passwords in mask-attack mode when mask > length 16
  
• Fixed cracking of DNSSEC (NSEC3) hashes by replacing all dots in the passwords with lengths
  
• Fixed cracking of Electrum Wallet Salt-Type 2 hashes
  
• Fixed cracking of NetNTLMv1 passwords in mask-attack mode when mask > length 16 (optimized kernels only)
  
• Fixed cracking of RAR3-hp hashes with pure kernel for passwords longer than 28 bytes
  
• Fixed cracking of VeraCrypt Streebog-512 hashes (CPU only)
  
• Fixed cracking raw Streebog-HMAC 256 and 512 hashes for passwords of length >= 64
  
• Fixed cracking raw Whirlpool hashes cracking for passwords of length >= 32
  
• Fixed incorrect progress-only result in a special race condition
  
• Fixed invalid call of mp_css_utf16le_expand()/mp_css_utf16be_expand() in slow-candidate sessions
  
• Fixed invalid password truncation in attack-mode 1 when the final password is longer than 32 characters
  
• Fixed invalid use of --hex-wordlist if encoded wordlist string is larger than length 256
  
• Fixed maximum password length limit which was announced as 256 but was actually 255
  
• Fixed out-of-boundary read in pure kernel rule engine rule 'p' when parameter was set to 2 or higher
  
• Fixed out-of-boundary write to decrypted[] in DPAPI masterkey file v1 kernel
  
• Fixed output of IKE PSK (mode 5300 and 5400) hashes to use separators in the correct position
  
• Fixed output password of "e" rule in pure and CPU rule engine when separator character is also the first letter
  
• Fixed problem with usage of hexadecimal notation (\x00-\xff) within rules
  
• Fixed race condition in maskfile mode by using a dedicated flag for restore execution
  
• Fixed some memory leaks when hashcat is shutting down due to some file error
  
• Fixed some memory leaks when mask-files are used in optimized mode
  
• Fixed --status-json to correctly escape certain characters in hashes
  
• Fixed the 7-Zip parser to allow the entire supported range of encrypted and decrypted data lengths
  
• Fixed the validation of the --brain-client-features command line argument (only values 1, 2 or 3 are allowed)
  

• Bitcoin Wallet: Be more user friendly by allowing a larger data range for ckey and public_key
  
• Brain: Added new parameter --brain-server-timer to specify seconds between scheduled backups
  
• Building: Fix for library compilation failure due to multiple defenition of sbob_xx64()
  
• Cracking bcrypt and Password Safe v2: Use feedback from the compute API backend to dynamically calculate optimal thread count
  
• Dictstat: On Windows, the st_ino attribute in the stat struct is not set, which can lead to invalid cache hits. Added the filename to the database entry.
  
• Documents: Added README on how to build hashcat on Cygwin, MSYS2 and WSL
  
• File handling: Print a truncation warning when an oversized line is detected
  
• My Wallet: Added additional plaintext pattern used in newer versions
  
• Office cracking: Support hash format with second block data for 40-bit oldoffice files (eliminates false positives)
  
• OpenCL Runtime: Added a warning if OpenCL runtime NEO, Beignet, POCL (v1.4 or older) or MESA is detected, and skip associated devices (override with --force)
  
• OpenCL Runtime: Allow the kernel to access post-48k shared memory region on CUDA. Requires both module and kernel preparation
  
• OpenCL Runtime: Disable OpenCL kernel cache on Apple for Intel CPU (throws CL_BUILD_PROGRAM_FAILURE for no reason)
  
• OpenCL Runtime: Do not run shared- or constant-memory size checks if their memory type is of type global memory (typically CPU)
  
• OpenCL Runtime: Improve ROCm detection and make sure to not confuse with recent AMDGPU drivers
  
• OpenCL Runtime: Not using amd_bytealign (amd_bitalign is fine) on AMDGPU driver drastically reduces JiT segfaults
  
• OpenCL Runtime: Unlocked maximum thread count for NVIDIA GPU
  
• OpenCL Runtime: Update unstable mode warnings for Apple and AMDGPU drivers
  
• OpenCL Runtime: Workaround JiT compiler error on AMDGPU driver compiling WPA-EAPOL-PBKDF2 OpenCL kernel
  
• OpenCL Runtime: Workaround JiT compiler error on ROCm 2.3 driver if the 'inline' keyword is used in function declaration
  
• OpenCL Runtime: Workaround memory allocation error on AMD driver on Windows leading to CL_MEM_OBJECT_ALLOCATION_FAILURE
  
• OpenCL Runtime: Removed some workarounds by calling chdir() to specific folders on startup
  
• Outfile: Added new system to specify the outfile format, the new --outfile-format now also supports timestamps
  
• Startup Checks: Improved the pidfile check: Do not just check for existing PID, but also check executable filename
  
• Startup Checks: Prevent the user from modifying options which are overwritten automatically in benchmark mode
  
• Startup Screen: Add extra warning when using --force
  
• Startup Screen: Add extra warning when using --keep-guessing
  
• Startup Screen: Provide an estimate of host memory required for the requested attack
  
• Status Screen: Added brain status for all compute devices
  
• Status Screen: Added remaining counts and changed recovered count logic
  
• Status Screen: Added --status-json flag for easier machine reading of hashcat status output
  
• Tab Completion: Allow using "make install" version of hashcat
  
• Tuning Database: Updated hashcat.hctune with new models and refreshed vector width values
  
• VeraCrypt: Added support for VeraCrypt PIM brute-force, replaced --veracrypt-pim with --veracrypt-pim-start and --veracrypt-pim-stop
  
• WipZip cracking: Added two byte early reject, resulting in higher cracking speed
  
• WPA/WPA2 cracking: In the potfile, replace password with PMK in order to detect already cracked networks across all WPA modes
  

• Backend Interface: Added new options --backend-ignore-cuda and --backend-ingore-opencl to prevent CUDA and/or OpenCL API from being used
  
• Binary Distribution: Removed 32-bit binary executables
  
• Building: On macOS, switch from ar to /usr/bin/ar to improve building compatibility
  
• Building: Skipping Travis/Appveyor build for non-code changes
  
• Codebase: Cleanup of many unused rc_* variables
  
• Codebase: Fixed some printf() format arguments
  
• Codebase: Fixed some type casting to avoid truncLongCastAssignment warnings
  
• Codebase: Moved hc_* file functions from shared.c to filehandling.c
  
• Codebase: Ran through a bunch of clang-tidy checkers and updated code accordingly
  
• Codebase: Remove redundant calls to fclose()
  
• Dependencies: Updated LZMA-Headers from 18.05 to 19.00
  
• Dependencies: Updated OpenCL-Headers to latest version from GitHub master repository
  
• Hash-Mode 12500 (RAR3-hp): Allow cracking of passwords up to length 64
  
• Hash-mode 1460 (HMAC-SHA256 (key = $salt)): Allow up to 64 byte of salt
  
• Hash-Mode 1680x (WPA-PMKID) specific: Changed separator character from '*' to ':'
  
• Hash-Mode 8300 (DNSSEC (NSEC3)) specific: Allow empty salt
  
• Keep Guessing: No longer automatically activate --keep-guessing for modes 9720, 9820, 14900 and 18100
  
• Keep Guessing: No longer mark hashes as cracked/removed when in potfile
  
• Kernel Cache: Reactivate OpenCL runtime specific kernel caches
  
• Kernel Compile: Removed -cl-std= from all kernel build options since we're compatible to all OpenCL versions
  
• OpenCL Kernels: Fix OpenCL compiler warning on double precision constants
  
• OpenCL Kernels: Moved "gpu_decompress", "gpu_memset" and "gpu_atinit" into shared.cl in order to reduce compile time
  
• OpenCL Options: Removed --opencl-platforms filter in order to force backend device numbers to stay constant
  
• OpenCL Options: Set --spin-damp to 0 (disabled) by default. With the CUDA backend this workaround became deprecated
  
• Parsers: switched from strtok() to strtok_r() for thread safety
  
• Requirements: Add new requirement for NVIDIA GPU: CUDA Toolkit (9.0 or later)
  
• Requirements: Update runtime check for minimum NVIDIA driver version from 367.x to 440.64 or later
  
• Test Script: Switched from /bin/bash to generic /bin/sh and updated code accordingly
  

• Added pure kernels for hash-mode 11700 (Streebog-256)
  
• Added pure kernels for hash-mode 11800 (Streebog-512)
  
• Added hash-mode 11750 (HMAC-Streebog-256 (key = $pass), big-endian)
  
• Added hash-mode 11760 (HMAC-Streebog-256 (key = $salt), big-endian)
  
• Added hash-mode 11850 (HMAC-Streebog-512 (key = $pass), big-endian)
  
• Added hash-mode 11860 (HMAC-Streebog-512 (key = $salt), big-endian)
  
• Added hash-mode 13771 (VeraCrypt PBKDF2-HMAC-Streebog-512 + XTS 512 bit)
  
• Added hash-mode 13772 (VeraCrypt PBKDF2-HMAC-Streebog-512 + XTS 1024 bit)
  
• Added hash-mode 13773 (VeraCrypt PBKDF2-HMAC-Streebog-512 + XTS 1536 bit)
  
• Added hash-mode 18200 (Kerberos 5 AS-REP etype 23)
  
• Added hash-mode 18300 (Apple File System (APFS))
  
• Added Kuznyechik cipher and cascades support for VeraCrypt kernels
  
• Added Camellia cipher and cascades support for VeraCrypt kernels
  

• Added support for using --stdout in brain-client mode
  
• Added new option --stdin-timeout-abort, to set how long hashcat should wait for stdin input before aborting
  
• Added new option --kernel-threads to manually override the automatically-calculated number of threads
  
• Added new option --keyboard-layout-mapping to map users keyboard layout, required to crack TC/VC system boot volumes
  

• OpenCL Devices: Add support for up to 64 OpenCL devices per system
  
• OpenCL Platforms: Add support for up to 64 OpenCL platforms per system
  
• OpenCL Runtime: Use our own yielding technique for synchronizing rather than vendor specific
  
• Startup: Show OpenCL runtime initialization message (per device)
  
• xxHash: Added support for using the version provided by the OS/distribution
  

• Fixed automated calculation of brain-session when not using all hashes in the hashlist
  
• Fixed calculation of brain-attack if a given wordlist has zero size
  
• Fixed checking the length of the last token in a hash if it was given the attribute TOKEN_ATTR_FIXED_LENGTH
  
• Fixed endianness and invalid separator character in outfile format for hash-mode 16801 (WPA-PMKID-PMK)
  
• Fixed ignoring --brain-client-features configuration when brain server has attack-position information from a previous run
  
• Fixed invalid hardware monitor detection in benchmark mode
  
• Fixed invalid warnings about throttling when --hwmon-disable was used
  
• Fixed missing call to WSACleanup() to cleanly shutdown windows sockets system
  
• Fixed missing call to WSAStartup() and client indexing in order to start the brain server on Windows
  
• Fixed out-of-boundary read in DPAPI masterkey file v2 OpenCL kernel
  
• Fixed out-of-bounds write in short-term memory of the brain server
  
• Fixed output of --speed-only and --progress-only when fast hashes are used in combination with --slow-candidates
  
• Fixed selection of OpenCL devices (-d) if there's more than 32 OpenCL devices installed
  
• Fixed status output of progress value when -S and -l are used in combination
  
• Fixed thread count maximum for pure kernels in straight attack mode
  

• Brain: Set --brain-client-features default from 3 to 2
  
• Dependencies: Added xxHash and OpenCL-Headers to deps/ in order to allow building hashcat from GitHub source release package
  
• Dependencies: Removed gitmodules xxHash and OpenCL-Headers
  
• Keymaps: Added hashcat keyboard mapping us.hckmap (can be used as template)
  
• Keymaps: Added hashcat keyboard mapping de.hckmap
  
• Hardware Monitor: Renamed --gpu-temp-abort to --hwmon-temp-abort
  
• Hardware Monitor: Renamed --gpu-temp-disable to --hwmon-disable
  
• Memory: Limit maximum host memory allocation depending on bitness
  
• Memory: Reduced default maximum bitmap size from 24 to 18 and give a notice to use --bitmap-max to restore
  
• Parameter: Rename --nvidia-spin-damp to --spin-damp (now accessible for all devices)
  
• Pidfile: Treat a corrupted pidfile like a not existing pidfile
  
• OpenCL Device: Do a real query on OpenCL local memory type instead of just assuming it
  
• OpenCL Runtime: Disable auto-vectorization for Intel OpenCL runtime to workaround hanging JiT since version 18.1.0.013
  
• Tests: Added hash-mode 11700 (Streebog-256)
  
• Tests: Added hash-mode 11750 (HMAC-Streebog-256 (key = $pass), big-endian)
  
• Tests: Added hash-mode 11760 (HMAC-Streebog-256 (key = $salt), big-endian)
  
• Tests: Added hash-mode 11800 (Streebog-512)
  
• Tests: Added hash-mode 11850 (HMAC-Streebog-512 (key = $pass), big-endian)
  
• Tests: Added hash-mode 11860 (HMAC-Streebog-512 (key = $salt), big-endian)
  
• Tests: Added hash-mode 13711 (VeraCrypt PBKDF2-HMAC-RIPEMD160 + XTS 512 bit)
  
• Tests: Added hash-mode 13712 (VeraCrypt PBKDF2-HMAC-RIPEMD160 + XTS 1024 bit)
  
• Tests: Added hash-mode 13713 (VeraCrypt PBKDF2-HMAC-RIPEMD160 + XTS 1536 bit)
  
• Tests: Added hash-mode 13721 (VeraCrypt PBKDF2-HMAC-SHA512 + XTS 512 bit)
  
• Tests: Added hash-mode 13722 (VeraCrypt PBKDF2-HMAC-SHA512 + XTS 1024 bit)
  
• Tests: Added hash-mode 13723 (VeraCrypt PBKDF2-HMAC-SHA512 + XTS 1536 bit)
  
• Tests: Added hash-mode 13731 (VeraCrypt PBKDF2-HMAC-Whirlpool + XTS 512 bit)
  
• Tests: Added hash-mode 13732 (VeraCrypt PBKDF2-HMAC-Whirlpool + XTS 1024 bit)
  
• Tests: Added hash-mode 13733 (VeraCrypt PBKDF2-HMAC-Whirlpool + XTS 1536 bit)
  
• Tests: Added hash-mode 13751 (VeraCrypt PBKDF2-HMAC-SHA256 + XTS 512 bit)
  
• Tests: Added hash-mode 13752 (VeraCrypt PBKDF2-HMAC-SHA256 + XTS 1024 bit)
  
• Tests: Added hash-mode 13753 (VeraCrypt PBKDF2-HMAC-SHA256 + XTS 1536 bit)
  
• Tests: Added hash-mode 13771 (VeraCrypt PBKDF2-HMAC-Streebog-512 + XTS 512 bit)
  
• Tests: Added hash-mode 13772 (VeraCrypt PBKDF2-HMAC-Streebog-512 + XTS 1024 bit)
  
• Tests: Added hash-mode 13773 (VeraCrypt PBKDF2-HMAC-Streebog-512 + XTS 1536 bit)
  
• Tests: Added VeraCrypt containers for Kuznyechik cipher and cascades
  
• Tests: Added VeraCrypt containers for Camellia cipher and cascades
  

• The hashcat brain
  
• Slow candidates
  

• Added hash-mode 17300 = SHA3-224
  
• Added hash-mode 17400 = SHA3-256
  
• Added hash-mode 17500 = SHA3-384
  
• Added hash-mode 17600 = SHA3-512
  
• Added hash-mode 17700 = Keccak-224
  
• Added hash-mode 17800 = Keccak-256
  
• Added hash-mode 17900 = Keccak-384
  
• Added hash-mode 18000 = Keccak-512
  
• Added hash-mode 18100 = TOTP (HMAC-SHA1)
  
• Removed hash-mode 5000 = SHA-3 (Keccak)
  

• Added additional hybrid "passthrough" rules, to enable variable-length append/prepend attacks
  
• Added a periodic check for read timeouts in stdin/pipe mode, and abort if no input was provided
  
• Added a tracker for salts, amplifier and iterations to the status screen
  
• Added option --markov-hcstat2 to make it clear that the new hcstat2 format (compressed hcstat2gen output) must be used
  
• Allow bitcoin master key lengths other than 96 bytes (but they must be always multiples of 16)
  
• Allow hashfile for -m 16800 to be used with -m 16801
  
• Allow keepass iteration count to be larger than 999999
  
• Changed algorithms using colon as separators in the hash to not use the hashconfig separator on parsing
  
• Do not allocate memory segments for bitmap tables if we don't need it for example, in benchmark mode
  
• Got rid of OPTS_TYPE_HASH_COPY for Ansible Vault
  
• Improved the speed of the outfile folder scan when using many hashes/salts
  
• Increased the maximum size of edata2 in Kerberos 5 TGS-REP etype 23
  
• Make the masks parser more restrictive by rejecting a single '?' at the end of the mask (use ?? instead)
  
• Override --quiet and show final status screen in case --status is used
  
• Removed duplicate words in the dictionary file example.dict
  
• Updated Intel OpenCL runtime version check
  
• Work around some AMD OpenCL runtime segmentation faults
  
• Work around some padding issues with host compilers and OpenCL JiT on 32 and 64-bit systems
  

• Fixed a invalid scalar datatype return value in hc_bytealign() where it should be a vector datatype return value
  
• Fixed a problem with attack mode -a 7 together with stdout mode where the mask bytes were missing in the output
  
• Fixed a problem with tab completion where --self-test-disable incorrectly expected a further parameter/value
  
• Fixed a race condition in status view that lead to out-of-bound reads
  
• Fixed detection of unique ESSID in WPA-PMKID-* parser
  
• Fixed missing wordlist encoding in combinator mode
  
• Fixed speed/delay problem when quitting while the outfile folder is being scanned
  
• Fixed the ciphertext max length in Ansible Vault parser
  
• Fixed the tokenizer configuration in Postgres hash parser
  
• Fixed the byte order of digest output for hash-mode 11800 (Streebog-512)
  

Quote:$ wc -l wordlist.txt
1 wordlist.txt
$ wc -l pattern.rule
99092 pattern.rule

Quote:$ ./hashcat -m 400 example400.hash wordlist.txt -r pattern.rule --speed-only
...
Speed.#2.........:      145 H/s (0.07ms)

Quote:$ ./hashcat -m 400 example400.hash wordlist.txt -r pattern.rule --speed-only -S
...
Speed.#2.........:   361.3 kH/s (3.54ms)

Quote:$ ./hashcat --stdout example.dict -r rules/best64.rule -o test.txt

Quote:$ cat test.txt | wc -l
9888032

Quote:$ sort -u test.txt | wc -l
7508620

Quote:$ ./hashcat -z example0.hash example.dict -r rules/best64.rule
...
Rejected.........: 2379391/9888032 (24.06%)

• Hashcat brain rejects dynamically created duplicate candidates
  
• Average dynamically created duplicate candidates is around 25%
  
• Eliminating the duplicate 25% reduces the attack time by 25%
  

Quote:$ ./hashcat -z -m 6211 hashcat_ripemd160_aes.tc rockyou.txt
...
Time.Started.....: xxx (32 mins, 6 secs)

Quote:$ ./hashcat -z -m 6211 hashcat_ripemd160_aes.tc rockyou.txt
...
Rejected.........: 14344384/14344384 (100.00%)
Time.Started.....: xxx (15 secs)

• The rejected count exactly matches the keyspace.
  
• The attack took a bit of time - it's not 0 seconds. The process is not completely without cost. The client must hash all of the candidates, and transfer them to the hashcat brain; the hashcat brain must then search for those candidates in both memory regions, and send back a reject list; and then hashcat must select new candidates to fill the reject gaps, and so on ...
  
• Most important: 15 seconds is less than 32 minutes
  

Quote:$ ./hashcat -z -m 6211 hashcat_ripemd160_aes.tc -a 3 ?d?d?d?d
...
Rejected.........: 6359/10000 (63.59%)

Quote:$ grep -c '^[0123456789]\{4\}$' rockyou.txt
6359

• The previous command from the second example kicks in here. In the rockyou wordlist, we have 6359 pure digits with length 4 and the hashcat brain was able to reject them - because the mask ?d?d?d?d will also produce them
  
• The hashcat brain does not care about your attack mode. Actually, you could say that the hashcat brain creates a kind of dynamic cross attack-mode while you are using it. As you can see here, attack-mode 0 and attack-mode 3 work together.
  
• The hashcat brain does not end after hashcat finishes - it stays intact because it's a stand-alone process
  

Quote:$ ./hashcat -m 6211 hashcat_ripemd160_aes.tc -a 3 -1 ?l?d$ ?1?1?1?1?1?1
...
Time.Started.....: xxx (5 hours, 37 mins)
Progress.........: 2565726409/2565726409 (100.00%)

Quote:$ ./hashcat -m 6211 hashcat_ripemd160_aes.tc -a 3 -1 ?l?d$! ?1?1?1?1?1?1
...
Time.Started.....: xxx (6 hours, 39 mins)
Progress.........: 3010936384/3010936384 (100.00%)

Quote:$ ./hashcat -z -m 6211 hashcat_ripemd160_aes.tc -a 3 -1 ?l?d$ ?1?1?1?1?1?1
...
Time.Started.....: xxx (5 hours, 37 mins)

Quote:$ ./hashcat -z -m 6211 hashcat_ripemd160_aes.tc -a 3 -1 ?l?d$! ?1?1?1?1?1?1
...
Time.Started.....: xxx (1 hour, 5 mins)

Quote:$ cat wordlist.txt
password
$ ./hashcat wordlist.txt --stdout -g 100000 | sort -u | wc -l
20473

Quote:./hashcat -z hashlist.txt wordlist.txt -g 100000
...
Rejected.........: 82093/100000 (82.09%)

Quote:$ ./hashcat -z -m 111 c0_111.list.txt wordlist.txt -g 100000 --debug-mode 4
...
INFO: Removed 188292 hashes found in potfile.
...
time:Z4 R3:tim2eeee
sexual:Y3 Z5 O35exllllll
poodle:Y2 T3 sBh:pooDlele
pass123:C z5:ppppppASS123
pool:y4 Z2 Y1:poolpoollll
profit:o8F ^_:_profit
smashing:Z3mashingggg

• The hashcat brain server saves the long-term memory to disc every 5 minutes automatically
  
• The server also saves the long-term memory if the hashcat brain server is killed using Ctrl-C
  
• There's no mitigation against database poisoning - this would cost too many resources
  
• There's currently no mitigation against an evil client requesting the server to allocate too much memory
  
• Make sure your hashcat brain server is protected with a good password, because you have to trust your clients
  
• I'll add a standalone hashcat brain seeding tool later which enables you to easily push all the words from an entire wordlist or a mask very fast. At this time you can use the --hashcat-session option to do so with hashcat itself
  
• You can use --brain-server-whitelist in order to force the clients to use a specific hashlist
  
• The protocol used is pretty simple and does not contain hashcat specific information, which should make it possible for other cracking tools to utilize the server, too
  

• The client calculates the hashcat brain session based on the hashlist entries, to efficiently let a high number of salts work for us. You can override the session calculated with --brain-session, which makes sense if you want to use a fast hash in order to "seed" the hashcat brain with already-tried wordlists or masks.
  
• The use of --remove is forbidden, but this should not really be a problem, since the potfile will do the same for you. Make sure to remove --potfile-disable in case you use it.
  
• If multiple clients use the same attack on the same hashcat brain (which is a clever idea), you end up with a distributed solution - without the need of an overlay for keyspace distribution. This is not the intended use of the hashcat brain and should not be used as it. I'll explain later.
  
• Since each password candidate is creating a hash of 8 bytes, some serious network upstream traffic can be generated from your client. I'll explain later.
  
• The use of xxHash as hash is not required; we can exchange it with whatever hash we want. However so far it's doing a great job.
  

Quote:Speed.#1.........:        0 H/s (0.00ms) @ Accel:64 Loops:1 Thr:1024 Vec:1
Speed.#2.........:        0 H/s (0.00ms) @ Accel:64 Loops:1 Thr:1024 Vec:1
Speed.#3.........:        0 H/s (0.00ms) @ Accel:64 Loops:1 Thr:1024 Vec:1
Speed.#4.........:        0 H/s (0.00ms) @ Accel:64 Loops:1 Thr:1024 Vec:1
...
Brain.Link.#1....: RX: 0 B (0.00 Mbps), TX: 4.1 MB (1.22 Mbps), sending
Brain.Link.#2....: RX: 0 B (0.00 Mbps), TX: 4.7 MB (1.09 Mbps), sending
Brain.Link.#3....: RX: 0 B (0.00 Mbps), TX: 3.5 MB (0.88 Mbps), sending
Brain.Link.#4....: RX: 0 B (0.00 Mbps), TX: 4.1 MB (0.69 Mbps), sending

Quote:Speed.#1.........:   869.1 MH/s (1.36ms) @ Accel:64 Loops:1 Thr:1024 Vec:1
Speed.#2.........:   870.8 MH/s (1.36ms) @ Accel:64 Loops:1 Thr:1024 Vec:1
Speed.#3.........:   876.2 MH/s (1.36ms) @ Accel:64 Loops:1 Thr:1024 Vec:1
Speed.#4.........:   872.6 MH/s (1.36ms) @ Accel:64 Loops:1 Thr:1024 Vec:1
...
Brain.Link.#1....: RX: 1.3 MB (0.00 Mbps), TX: 10.5 MB (0.00 Mbps), idle
Brain.Link.#2....: RX: 1.3 MB (0.00 Mbps), TX: 10.5 MB (0.00 Mbps), idle
Brain.Link.#3....: RX: 1.3 MB (0.00 Mbps), TX: 10.5 MB (0.00 Mbps), idle
Brain.Link.#4....: RX: 1.3 MB (0.00 Mbps), TX: 10.5 MB (0.00 Mbps), idle

• Brain "Hashes" feature
  
• Brain "Attacks" feature
  

• The client doesn't need to transfer the hashes (which mitigates the bandwidth bottleneck)
  
• The brain server doesn't need to compare it (which mitigates the lookup bottleneck)
  

• Add new option --brain-server to start a hashcat brain server
  
• Add new option --brain-client to start a hashcat brain client, automatically activates --slow-candidates
  
• Add new option --brain-host and --brain-port to specify ip and port of brain server, both listening and connecting
  
• Add new option --brain-session to override automatically calculated brain session ID
  
• Add new option --brain-session-whitelist to allow only explicit written session ID on brain server
  
• Add new option --brain-password to specify the brain server authentication password
  
• Add new option --brain-client-features which allows enable and disable certain features of the hashcat brain
  

• Added hash-mode 16700 = FileVault 2
  
• Added hash-mode 16800 = WPA-PMKID-PBKDF2
  
• Added hash-mode 16801 = WPA-PMKID-PMK
  
• Added hash-mode 16900 = Ansible Vault
  

• Added JtR-compatible support for hex notation in the rules engine
  
• Added OpenCL device utilization to the status information in machine-readable output
  
• Added missing NV Tesla and Titan GPU details to tuning database
  
• General file handling: Abort if a byte-order mark (BOM) is detected in a wordlist, hashlist, maskfile or rulefile
  
• HCCAPX management: Use advanced hints in message_pair stored by hcxtools about endian bitness of replay counter
  
• OpenCL kernels: Abort session if kernel self-test fails
  
• OpenCL kernels: Add '-pure' prefix to kernel filenames to avoid problems caused by reusing existing hashcat installation folder
  
• OpenCL kernels: Removed the use of 'volatile' keyword in inline assembly instructions where it is not needed
  
• OpenCL kernels: Switched array pointer types in function declarations in order to be compatible with OpenCL 2.0
  
• Refactored code for --progress-only and --speed-only calculation
  
• SIP cracking: Increased the nonce field to allow a salt of 1024 bytes
  
• TrueCrypt/VeraCrypt cracking: Do an entropy check on the TC/VC header on start
  

• The removal of 'volatile' keyword has a large positive impact on cracking performance on macOS
  
• The refactored code for --progress-only is important if hashcat is used in combination with a distributed overlay such as hashtopolis
  

• Fixed a function declaration attribute in -m 8900 kernel that led to unusable -m 9300 (which shares kernel code with -m 8900)
  
• Fixed a miscalculation in --progress-only mode output for extremely slow kernels like -m 14800
  
• Fixed a missing check for errors on OpenCL devices leading to invalid removal of the restore file
  
• Fixed a missing kernel in -m 5600 in combination with -a 3 and -O if mask is >= 16 characters
  
• Fixed detection of AMD_GCN version when the rocm driver is used
  
• Fixed missing code section in -m 2500 and -m 2501 to crack corrupted handshakes with a LE endian bitness base
  
• Fixed a missing check for hashmodes using OPTS_TYPE_PT_UPPER causing the self-test to fail when using combinator and hybrid modes
  

• Added hash-mode 16000 = Tripcode
  
• Added hash-mode 16100 = TACACS+
  
• Added hash-mode 16200 = Apple Secure Notes
  
• Added hash-mode 16300 = Ethereum Pre-Sale Wallet, PBKDF2-SHA256
  
• Added hash-mode 16400 = CRAM-MD5 Dovecot
  
• Added hash-mode 16500 = JWT (JSON Web Token)
  
• Added hash-mode 16600 = Electrum Wallet (Salt-Type 1-3)
  

• A new technique to reduce PCIe transfer time by using so-called "compression" kernels
  
• The OpenCL kernel thread management was refactored, giving a strong boost on PBKDF2 based kernels (WPA, etc)
  
• Improved autotune support
  
• Improved OpenCL JiT compiler settings
  
• Workaround for some bad OpenCL runtime settings on macOS
  

• Added option --benchmark-all to benchmark all hash-modes (not just the default selection)
  
• Removed option --gpu-temp-retain that tried to retain GPU temperature at X degrees celsius - please use driver-specific tools
  
• Removed option --powertune-enable to enable power tuning - please use driver specific tools
  

• OpenCL Kernels: Add a decompressing kernel and a compressing host code in order to reduce PCIe transfer time
  
• OpenCL Kernels: Improve performance preview accuracy in --benchmark, --speed-only and --progress-only mode
  
• OpenCL Kernels: Remove password length restriction of 16 for Cisco-PIX and Cisco-ASA hashes
  
• Terminal: Display set cost/rounds during benchmarking
  
• Terminal: Show [r]esume in prompt only in pause mode, and show [p]ause in prompt only in resume mode
  

• Fixed a configuration setting for -m 400 in pure kernel mode which said it was capable of doing SIMD when it is not
  
• Fixed a hash parsing problem for 7-Zip hashes: allow a longer CRC32 data length field within the hash format
  
• Fixed a hash parsing problem when using --show/--left with hashes with long salts that required pure kernels
  
• Fixed a logic error in storing temporary progress for slow hashes, leading to invalid speeds in status view
  
• Fixed a mask-length check issue: return -1 in case the mask length is not within the password-length range
  
• Fixed a missing check for return code in case hashcat.hcstat2 was not found
  
• Fixed a race condition in combinator- and hybrid-mode where the same scratch buffer was used by multiple threads
  
• Fixed a restore issue leading to "Restore value is greater than keyspace" when mask files or wordlist folders were used
  
• Fixed a uninitialized value in OpenCL kernels 9720, 9820 and 10420 leading to absurd benchmark performance
  
• Fixed the maximum password length check in password-reassembling function
  
• Fixed the output of --show when $HEX[] passwords were present within the potfile
  

• Autotune: Improve autotune engine logic and synchronize results on same OpenCL devices
  
• Documents: Added docs/limits.txt
  
• Files: Copy include/ folder and its content when SHARED is set to 1 in Makefile
  
• Files: Switched back to relative current working directory on windows to work around problems with Unicode characters
  
• Hashcat Context: Fixed a memory leak in shutdown phase
  
• Hash Parser: Changed the way large strings are handled/truncated within the event buffer if they are too large to fit
  
• Hash Parser: Fixed a memory leak in shutdown phase
  
• Hash Parser: Fixed the use of strtok_r () calls
  
• OpenCL Devices: Fixed several memory leaks in shutdown phase
  
• OpenCL Kernels: Add general function declaration keyword (inline) and some OpenCL runtime specific exceptions for NV and CPU devices
  
• OpenCL Kernels: Replace variables from uXX to uXXa if used in __constant space
  
• OpenCL Kernels: Use a special kernel to initialize the password buffer used during autotune measurements, to reduce startup time
  
• OpenCL Kernels: Refactored kernel thread management from native to maximum per kernel
  
• OpenCL Kernels: Use three separate comparison kernels (depending on keyver) for WPA instead of one
  
• OpenCL Runtime: Add current timestamp to OpenCL kernel source in order to force OpenCL JiT compiler to not use the cache
  
• OpenCL Runtime: Enforce use of OpenCL version 1.2 to restrain OpenCL runtimes to make use of the __generic address space qualifier
  
• OpenCL Runtime: Updated rocm detection
  
• Returncode: Enforce return code 0 when the user selects --speed-only or --progress-only and no other error occurs
  
• Rules: Fixed some default rule-files after changing rule meaning of 'x' to 'O'
  
• Self Test: Skip self-test for mode 8900 - user-configurable scrypt settings are incompatible with fixed settings in the self-test hash
  
• Self Test: Skip self-test for mode 15700 because the settings are too high and cause startup times that are too long
  
• Terminal: Add workitem settings to status display (can be handy for debugging)
  
• Terminal: Send clear-line code to the same output stream as the message immediately following
  
• Timer: Switch from gettimeofday() to clock_gettime() to work around problems on cygwin
  
• User Options: According to getopts manpage, the last element of the option array has to be filled with zeros
  

• Added support to crack passwords and salts up to length 256
  
• Added option --optimized-kernel-enable to use faster kernels but limit the maximum supported password- and salt-length
  
• Added self-test functionality to detect broken OpenCL runtimes on startup
  
• Added option --self-test-disable to disable self-test functionality on startup
  
• Added option --wordlist-autohex-disable to disable the automatical conversion of $HEX[] words from the word list
  
• Added option --example-hashes to show an example hash for each hash-mode
  
• Removed option --weak-hash-check (zero-length password check) to increase startup time, it also causes many Trap 6 error on macOS
  

• Added hash-mode 2500 = WPA/WPA2 (SHA256-AES-CMAC)
  
• Added hash-mode 2501 = WPA/WPA2 PMK
  

• Fixed a buffer overflow in mangle_dupechar_last function
  
• Fixed a calculation error in get_power() leading to errors of type "BUG pw_add()!!"
  
• Fixed a memory problem that occured when the OpenCL folder was not found and e.g. the shared and session folder were the same
  
• Fixed a missing barrier() call in the RACF OpenCL kernel
  
• Fixed a missing salt length value in benchmark mode for SIP
  
• Fixed an integer overflow in hash buffer size calculation
  
• Fixed an integer overflow in innerloop_step and innerloop_cnt variables
  
• Fixed an integer overflow in masks not skipped when loaded from file
  
• Fixed an invalid optimization code in kernel 7700 depending on the input hash, causing the kernel to loop forever
  
• Fixed an invalid progress value in status view if words from the base wordlist get rejected because of length
  
• Fixed a parser error for mode -m 9820 = MS Office <= 2003 $3, SHA1 + RC4, collider #2
  
• Fixed a parser error in multiple modes not checking for return code, resulting in negative memory index writes
  
• Fixed a problem with changed current working directory, for instance by using --restore together with --remove
  
• Fixed a problem with the conversion to the $HEX[] format: convert/hexify also all passwords of the format $HEX[]
  
• Fixed the calculation of device_name_chksum; should be done for each iteration
  
• Fixed the dictstat lookup if nanoseconds are used in timestamps for the cached files
  
• Fixed the estimated time value whenever the value is very large and overflows
  
• Fixed the output of --show when used together with the collider modes -m 9710, 9810 or 10410
  
• Fixed the parsing of command line options. It doesn't show two times the same error about an invalid option anymore
  
• Fixed the parsing of DCC2 hashes by allowing the "#" character within the user name
  
• Fixed the parsing of descrypt hashes if the hashes do have non-standard characters within the salt
  
• Fixed the use of --veracrypt-pim option. It was completely ignored without showing an error
  
• Fixed the version number used in the restore file header
  

• Autotune: Do a pre-autotune test run to find out if kernel runtime is above some TDR limit
  
• Charset: Add additional DES charsets with corrected parity
  
• OpenCL Buffers: Do not allocate memory for amplifiers for fast hashes, it's simply not needed
  
• OpenCL Kernels: Improved performance of SHA-3 Kernel (keccak) by hardcoding the 0x80 stopbit
  
• OpenCL Kernels: Improved rule engine performance by 6% on for NVidia
  
• OpenCL Kernels: Move from ld.global.v4.u32 to ld.const.v4.u32 in _a3 kernels
  
• OpenCL Kernels: Replace bitwise swaps with rotate() versions for AMD
  
• OpenCL Kernels: Rewritten Keccak kernel to run fully on registers and partially reversed last round
  
• OpenCL Kernels: Rewritten SIP kernel from scratch
  
• OpenCL Kernels: Thread-count is set to hardware native count except if -w 4 is used then OpenCL maximum is used
  
• OpenCL Kernels: Updated default scrypt TMTO to be ideal for latest NVidia and AMD top models
  
• OpenCL Kernels: Vectorized tons of slow kernels to improve CPU cracking speed
  
• OpenCL Runtime: Improved detection for AMD and NV devices on macOS
  
• OpenCL Runtime: Improved performance on Intel MIC devices (Xeon PHI) on runtime level (300MH/s to 2000MH/s)
  
• OpenCL Runtime: Updated AMD ROCm driver version check, warn if version < 1.1
  
• Show cracks: Improved the performance of --show/--left if used together with --username
  
• Startup: Add visual indicator of active options when benchmarking
  
• Startup: Check and abort session if outfile and wordlist point to the same file
  
• Startup: Show some attack-specific optimizer constraints on start, eg: minimum and maximum support password- and salt-length
  
• WPA cracking: Improved nonce-error-corrections mode to use a both positive and negative corrections
  

• General: Update C standard from c99 to gnu99
  
• Hash Parser: Improved salt-length checks for generic hash modes
  
• HCdict File: Renamed file from hashcat.hcdict to hashcat.hcdict2 and add header because versions are incompatible
  
• HCstat File: Add code to read LZMA compressed hashcat.hcstat2
  
• HCstat File: Add hcstat2 support to enable masks of length up to 256, also adds a filetype header
  
• HCstat File: Renamed file from hashcat.hcstat to hashcat.hcstat2 and add header because versions are incompatible
  
• HCtune File: Remove apple related GPU entries to workaround Trap 6 error
  
• OpenCL Kernels: Added code generator for most of the switch_* functions and replaced existing code
  
• OpenCL Kernels: Declared all include functions as static to reduce binary kernel cache size
  
• OpenCL Kernels: On AMD GPU, optimized kernels for use with AMD ROCm driver
  
• OpenCL Kernels: Removed some include functions that are no longer needed to reduce compile time
  
• OpenCL Runtime: Fall back to 64 threads default (from 256) on AMD GPU to prevent creating too many workitems
  
• OpenCL Runtime: Forcing OpenCL 1.2 no longer needed. Option removed from build options
  
• OpenCL Runtime: On AMD GPU, recommend AMD ROCm driver for Linux
  
• Restore: Fixed the version number used in the restore file header
  
• Time: added new type for time measurements hc_time_t and related functions to force the use of 64 bit times
  

• Added hash-mode   600 = BLAKE2-512
  
• Added hash-mode 15200 = Blockchain, My Wallet, V2
  
• Added hash-mode 15300 = DPAPI masterkey file v1 and v2
  
• Added hash-mode 15400 = ChaCha20
  
• Added hash-mode 15500 = JKS Java Key Store Private Keys (SHA1)
  
• Added hash-mode 15600 = Ethereum Wallet, PBKDF2-HMAC-SHA256
  
• Added hash-mode 15700 = Ethereum Wallet, PBKDF2-SCRYPT
  

• 7-Zip cracking: increased max. data length to 320k and removed AES padding attack to avoid false negatives
  
• Dictionary cache: Show time spent on dictionary cache building at startup
  
• Rules: Support added for position 'p' (Nth instance of a character) in host mode (using -j or -k)
  
• Rules: Support added for rejection rule '_N' (reject plains of length not equal to N) in host mode
  
• Rules: Support added for rule 'eX'
  
• Wordlist encoding: Added parameters --encoding-from and --encoding-to to configure wordlist encoding handling
  
• Wordlist encoding: Support added for internal conversion between user-defined encodings during runtime
  

• Workaround added for NVIDIA NVML library: If libnvidia-ml.so couldn't be loaded, try again using libnvidia-ml.so.1
  

• WPA cracking: Improved nonce-error-corrections mode to fix corrupt nonces generated on big-endian devices
  

• Fixed a condition that caused hybrid attacks using a maskfile to not select all wordlists from a wordlist folder
  
• Fixed a memory leak that was present when a user periodically prints hashcat status (using --status-timer)
  
• Fixed a missing type specifier in a function declaration of the RACF kernel
  

• Building: In the binary release packages, link libiconv static for Windows binaries
  
• Dictstat: Structure for dictstat file changed to include --encoding-from and --encoding-to parameters
  
• OpenCL Runtime: Updated AMDGPU-PRO driver version check, warn if version 17.10 (known to be broken) is detected
  
• WPA cracking: Reduced --nonce-error-corrections default from 16 to 8 to compensate for speed drop caused by big-endian fixes
  

• WPA cracking: Added support for WPA/WPA2 handshake AP nonce automatic error correction
  
• WPA cracking: Added optional parameter --nonce-error-corrections to configure range of error correction
  

• Added hash-mode 15100 = Juniper/NetBSD sha1crypt
  

• Abbreviate long hashes to display the Hash.Target status line within 80 characters
  
• Refactored internal use of esalt to sync with the number of digests instead of the number of salts
  
• Refactored other output to display within 80 characters without wrapping
  

• Fixed a hash validation error when trying to load Android FDE < 4.3 hashes
  
• Fixed a problem where --keyspace combined with custom charsets incorrectly displayed an error message
  
• Fixed a problem where --stdout combined with custom charsets incorrectly displayed an error message
  
• Fixed a problem with parsing and displaying -m 7000 = Fortigate (FortiOS) hashes
  
• Fixed a race condition after sessions finish, where the input-base was freed but accessed afterwards
  
• Fixed a typo that resulted in the minimum password length not being correctly initialized
  
• Fixed --outfile-format formats 11 through 15 to show the correct crack position
  
• Fixed --remove to apply even when all hashes are either found in the potfile or detected in weak-hash checks
  

• Building: Added missing prototypes for atlassian_parse_hash function
  
• Dictionary Cache: Split long status line into multiple lines to stay < 80 chars
  
• Files: Detect and error when users try to use -r with a parameter which is not a file
  
• HCCAPX Parser: Added support for a special bit (bit 8) of the message_pair that indicates if replay counters match
  
• Parameter: Detect and error when users try to use an empty string (length 0) for parameters like --session=
  
• Parameter: Detect and error when users try to use non-digit input when only digits are expected
  
• Sessions: Improved string comparison in case user sets --session to "hashcat"
  
• Status View: Add rejected counter to machine-readable output
  
• Status View: Rename labels Input.Mode, Input.Base, ... to Guess.Mode, Guess.Base, ...
  
• Status View: Added a visual indicator to the status screen when checkpoint quit has been requested
  
• Versions: Changed version naming convention from x.yz to x.y.z
  

• Added support to crack iTunes backups: https://hashcat.net/forum/thread-6047.html
  
• Added support to crack LUKS volumes: https://hashcat.net/forum/thread-6225.html
  
• Added support for hccapx files: https://hashcat.net/forum/thread-6273.html
  

• Added support for loading hccapx files
  
• Added support for filtering hccapx message pairs using --hccapx-message-pair
  
• Added support for parsing 7-Zip hashes with LZMA/LZMA2 compression indicator set to a non-zero value
  
• Added support for decompressing LZMA1/LZMA2 data for -m 11600 = 7-Zip to validate the CRC
  
• Added support for automatic merge of LM halfes in case --show and --left is used
  
• Added support for showing all user names with --show and --left if --username was specified
  
• Added support for GPU temperature management on cygwin build
  

• Added hash-mode  1411 = SSHA-256(Base64), LDAP {SSHA256}
  
• Added hash-mode  3910 = md5(md5($pass).md5($salt))
  
• Added hash-mode  4010 = md5($salt.md5($salt.$pass))
  
• Added hash-mode  4110 = md5($salt.md5($pass.$salt))
  
• Added hash-mode  4520 = sha1($salt.sha1($pass))
  
• Added hash-mode  4522 = PunBB
  
• Added hash-mode  7000 = Fortigate (FortiOS)
  
• Added hash-mode 12001 = Atlassian (PBKDF2-HMAC-SHA1)
  
• Added hash-mode 14600 = LUKS
  
• Added hash-mode 14700 = iTunes Backup < 10.0
  
• Added hash-mode 14800 = iTunes Backup >= 10.0
  
• Added hash-mode 14900 = Skip32
  
• Added hash-mode 15000 = FileZilla Server >= 0.9.55
  

• Fixed a problem within the Kerberos 5 TGS-REP (-m 13100) hash parser
  
• Fixed clEnqueueNDRangeKernel(): CL_UNKNOWN_ERROR caused by an invalid work-item count during weak-hash-check
  
• Fixed cracking of PeopleSoft Token (-m 13500) if salt length + password length is >= 128 byte
  
• Fixed cracking of Plaintext (-m 99999) in case MD4 was used in a previous session
  
• Fixed DEScrypt cracking in BF mode in case the hashlist contains more than 16 times the same salt
  
• Fixed duplicate detection for WPA handshakes with the same ESSID
  
• Fixed nvapi datatype definition for NvS32 and NvU32
  
• Fixed overflow in bcrypt kernel in expand_key() function
  
• Fixed pointer to local variable outside scope in case -j or -k is used
  
• Fixed pointer to local variable outside scope in case --markov-hcstat is not used
  
• Fixed recursion in loopback handling when session was aborted by the user
  
• Fixed rule 'O' (RULE_OP_MANGLE_OMIT) in host mode in case the offset + length parameter equals the length of the input word
  
• Fixed rule 'i' (RULE_OP_MANGLE_INSERT) in host mode in case the offset parameter equals the length of the input word
  
• Fixed string not null terminated inside workaround for checking drm driver path
  
• Fixed string not null terminated while reading maskfiles
  
• Fixed truncation of password after position 32 with the combinator attack
  
• Fixed use of option --keyspace in combination with -m 2500 (WPA)
  
• Fixed WPA/WPA2 cracking in case eapol frame is >= 248 byte
  

• Workaround added for AMDGPU-Pro OpenCL runtime: AES encrypt and decrypt Invertkey function was calculated wrong in certain cases
  
• Workaround added for AMDGPU-Pro OpenCL runtime: RAR3 kernel require a volatile variable to work correctly
  
• Workaround added for Apple OpenCL runtime: bcrypt kernel requires a volatile variable because of a compiler optimization bug
  
• Workaround added for NVidia OpenCL runtime: RACF kernel requires EBCDIC lookup to be done on shared memory
  

• Building: Add SHARED variable to Makefile to choose if hashcat is build as static or shared binary (using libhashcat.so/hashcat.dll)
  
• Building: Removed compiler option -march=native as this created problems for maintainers on various distributions
  
• Building: Removed the use of RPATH on linker level
  
• Building: Replaced linking of CRT_glob.o with the use of int _dowildcard
  
• Commandline: Do some checks related to custom-charset options if user specifies them
  
• CPU Affinity: Fixed memory leak in case invalid cpu Id was specified
  
• Dispatcher: Fixed several memory leaks in case an OpenCL error occurs
  
• Events: Improved the maximum event message handling. event_log () will now also internally make sure that the message is properly terminated
  
• File Locking: Improved error detection on file locks
  
• File Reads: Fixed memory leak in case outfile or hashfile was not accessible
  
• File Reads: Improved error detection on file reads, especially when getting the file stats
  
• Files: Do several file and folder checks on startup rather than when they are actually used to avoid related error after eventual intense operations
  
• Hardware Management: Bring back kernel exec timeout detection for NVidia on user request
  
• Hardware Monitor: Fixed several memory leaks in case hash-file writing (caused by --remove) failed
  
• Hardware Monitor: Fixed several memory leaks in case no hardware monitor sensor is found
  
• Hardware Monitor: In case NVML initialization failed, do not try to initialiaze NVAPI or XNVCTRL because they both depend on NVML
  
• Hash Parsing: Added additional bound checks for the SIP digest authentication (MD5) parser (-m 11400)
  
• Hash Parsing: Make sure that all files are correctly closed whenever a hash file parsing error occurs
  
• Helper: Added functions to check existence, type, read- and write-permissions and rewrite sources to use them instead of stat()
  
• Keyfile handling: Make sure that the memory is cleanly freed whenever a VeraCrypt/TrueCrypt keyfile fails to load
  
• Mask Checks: Added additional memory cleanups after parsing/verifying masks
  
• Mask Checks: Added integer overflow detection for a keyspace of a mask provided by user
  
• Mask Increment: Fixed memory leak in case mask_append() fails
  
• OpenCL Device: Do a check on available constant memory size and abort if it's less than 64kB
  
• OpenCL Device Management: Fixed several memory leaks in case initialization of an OpenCL device or platform failed
  
• OpenCL Header: Updated CL_* errorcode to OpenCL 1.2 standard
  
• OpenCL Kernel: Move kernel binary buffer from heap to stack memory
  
• OpenCL Kernel: Refactored read_kernel_binary to load only a single kernel for a single device
  
• OpenCL Kernel: Remove "static" keyword from function declarations; Causes older Intel OpenCL runtimes to fail compiling
  
• OpenCL Kernel: Renumbered hash-mode 7600 to 4521
  
• OpenCL Runtime: Added a warning about using Mesa OpenCL runtime
  
• OpenCL Runtime: Updated AMDGPU-Pro driver version check, do warn if version 16.60 is detected which is known to be broken
  
• Outfile Check: Fixed a memory leak for failed outfile reads
  
• Restore: Add some checks on the rd->cwd variable in restore case
  
• Rule Engine: Fixed several memory leaks in case loading of rules failed
  
• Session Management: Automatically set dedicated session names for non-cracking parameters, for example: --stdout
  
• Session Management: Fixed several memory leaks in case profile- or install-folder setup failed
  
• Sessions: Move out handling of multiple instance from restore file into separate pidfile
  
• Status screen: Do not try to clear prompt in --quiet mode
  
• Tests: Fixed the timeout status code value and increased the runtime to 400 seconds
  
• Threads: Restored strerror as %m is unsupported by the BSDs
  
• Wordlists: Disable dictstat handling for hash-mode 3000 as it virtually creates words in the wordlist which is not the case for other modes
  
• Wordlists: Fixed memory leak in case access a file in a wordlist folder fails
  
• WPA: Changed format for outfile and potfile from essid:mac1:mac2 to hash:mac_ap:mac_sta:essid
  
• WPA: Changed format for outfile_check from essid:mac1:mac2 to hash
  

• Files: Use $HEX[...] in case the password includes the separater character, increases potfile reading performance
  
• Files: If the user specifies a folder to scan for wordlists instead of directly a wordlist, then ignore the hidden files
  
• Loopback: Include passwords for removed hashes present in the potfile to next loopback iteration
  
• New option --progress-only: Quickly provides ideal progress step size and time to process based on the user options, then quit
  
• Status screen: Reenabled automatic status screen display in case of stdin used
  
• Truecrypt/Veracrypt: Use CRC32 to verify headers instead of fuzzy logic, greatly reduces false positives from 18:2^48 to 3:2^64
  
• WPA cracking: Reuse PBKDF2 intermediate keys if duplicate essid is detected
  

• Added hash-mode 1300 = SHA-224
  

• Fixed buffer overflow in status screen display in case of long non-utf8 string
  
• Fixed buffer overflow in plaintext parsing code: Leading to segfault
  
• Fixed custom char parsing code in maskfiles in --increment mode: Custom charset wasn't used
  
• Fixed display screen to show input queue when using custom charset or rules
  
• Fixed double fclose() using AMDGPU-Pro on sysfs compatible platform: Leading to segfault
  
• Fixed hash-mode 11400 = SIP digest authentication (MD5): Cracking of hashes which did not include *auth* or *auth-int* was broken
  
• Fixed hex output of plaintext in case --outfile-format 4, 5, 6 or 7 was used
  
• Fixed infinite loop when using --loopback in case all hashes have been cracked
  
• Fixed kernel loops in --increment mode leading to slower performance
  
• Fixed mask length check in hybrid attack-modes: Do not include hash-mode dependant mask length checks
  
• Fixed parsing of hashes in case the last line did not include a linefeed character
  
• Fixed potfile loading to accept blank passwords
  
• Fixed runtime limit: No longer required so sample startup time after refactorization
  

• Workaround added for Intel OpenCL runtime: GPU support is broken, skip the device unless user forces to enable it
  

• Building: Added hashcat32.dll and hashcat64.dll makefile targets for building hashcat windows libraries
  
• Building: Added production flag in Makefile to disable all the GCC compiler options needed only for development
  
• Building: Removed access to readlink() on FreeBSD
  
• Building: For CYGWIN prefer to use "opencl.dll" (installed by drivers) instead of optional "cygOpenCL-1.dll"
  
• Events: Added new event EVENT_WEAK_HASH_ALL_CRACKED if all hashes have been cracked during weak hash check
  
• Hardware management: Switched matching ADL device with OpenCL device by using PCI bus, device and function
  
• Hardware management: Switched matching NvAPI device with OpenCL device by using PCI bus, device and function
  
• Hardware management: Switched matching NVML device with OpenCL device by using PCI bus, device and function
  
• Hardware management: Switched matching xnvctrl device with OpenCL device by using PCI bus, device and function
  
• Hardware management: Removed *throttled* message from NVML as this created more confusion than it helped
  
• Hash Parser: Improved error detection of invalid hex characters where hex character are expected
  
• OpenCL Runtime: Updated AMDGPU-Pro driver version check, do warn if version 16.50 is detected which is known to be broken
  
• OpenCL Runtime: Updated hashcat.hctune for Iris Pro GPU on OSX
  
• Potfile: The default potfile suffix changed but the note about was missing. The "hashcat.pot" became "hashcat.potfile"
  
• Potfile: Added old potfile detection, show warning message
  
• Returncode: Added dedicated returncode (see docs/status_codes.txt) for shutdowns caused by --runtime and checkpoint keypress
  
• Sanity: Added sanity check to disallow --speed-only in combination with -i
  
• Sanity: Added sanity check to disallow --loopback in combination with --runtime
  
• Threads: Replaced all calls to ctime() with ctime_r() to ensure thread safety
  
• Threads: Replaced all calls to strerror() with %m printf() GNU extension to ensure thread safety
  

• New option --speed-only: Quickly provides cracking speed per device based on the user hashes and selected options, then quit
  
• New option --keep-guessing: Continue cracking hashes even after they have been cracked (to find collisions)
  
• New option --restore-file-path: Manually override the path to the restore file (useful if we want all session files in the same folder)
  
• New option --opencl-info: Show details about OpenCL compatible devices like an embedded clinfo tool (useful for bug reports)
  
• Documents: Added colors for warnings (yellow) and errors (red) instead of WARNING: and ERROR: prefix
  
• Documents: Added hints presented to the user about optimizing performance while hashcat is running
  
• Hardware management: Support --gpu-temp-retain for AMDGPU-Pro driver
  
• Hardware management: Support --powertune-enable for AMDGPU-Pro driver
  
• Password candidates: Allow words of length > 31 in wordlists for -a 0 for some slow hashes if no rules are in use
  
• Password candidates: Do not use $HEX[] if the password candidate is a valid UTF-8 string and print out as-is
  
• Pause mode: Allow quit program also if in pause mode
  
• Pause mode: Ignore runtime limit in pause mode
  
• Status view: Show core-clock, memory-clock and execution time in benchmark-mode in case --machine-readable is activated
  
• Status view: Show temperature, coreclock, memoryclock, fanspeed and pci-lanes for devices using AMDGPU-Pro driver
  
• Status view: Show the current first and last password candidate test queued for execution per device (as in JtR)
  
• Status view: Show the current position in the queue for both base and modifier (Example: Wordlist 2/5)
  
• Markov statistics: Update hashcat.hcstat which is used as reference whenever the user defines a mask
  
• Charsets: Added lowercase ascii hex (?h) and uppercase ascii hex (?H) as predefined charsets
  

• Added hash-mode 14000 = DES (PT = $salt, key = $pass)
  
• Added hash-mode 14100 = 3DES (PT = $salt, key = $pass)
  
• Added hash-mode 14400 = SHA1(CX)
  
• Added hash-mode 99999 = Plaintext
  
• Extended hash-mode 3200 = bcrypt: Accept signature $2b$ (February 2014)
  
• Improved hash-mode 8300 = DNSSEC: Additional parsing error detection
  

• Custom charset from file parsing code did not return an error if an error occured
  
• Fix some clSetKernelArg() size error that caused slow modes to not work anymore in -a 1 mode
  
• Hash-mode 11600 = (7-Zip): Depending on input hash a clEnqueueReadBuffer(): CL_INVALID_VALUE error occured
  
• Hash-mode 22 = Juniper Netscreen/SSG (ScreenOS): Fix salt length for -m 22 in benchmark mode
  
• Hash-Mode 5500 = NetNTLMv1 + ESS: Fix loading of NetNTLMv1 + SSP hash
  
• Hash-mode 6000 = RipeMD160: Fix typo in array index number
  
• If cracking a hash-mode using unicode passwords, length check of a mask was not taking into account
  
• If cracking a large salted hashlist the wordlist reject code was too slow to handle it, leading to 0H/s
  
• Null-pointer dereference in outfile-check shutdown code when using --outfile-check-dir, leading to segfault
  
• On startup hashcat tried to access the folder defined in INSTALL_FOLDER, leading to segfault if that folder was not existing
  
• Random rules generator code used invalid parameter for memory copy function (M), leading to use of invalid rule
  
• Sanity check for --outfile-format was broken if used in combination with --show or --left
  

• Workaround added for AMDGPU-Pro OpenCL runtime: Failed to compile hash-mode 10700 = PDF 1.7 Level 8
  
• Workaround added for AMDGPU-Pro OpenCL runtime: Failed to compile hash-mode 1800 = sha512crypt
  
• Workaround added for NVidia OpenCL runtime: Failed to compile hash-mode 6400 = AIX {ssha256}
  
• Workaround added for NVidia OpenCL runtime: Failed to compile hash-mode 6800 = Lastpass + Lastpass sniffed
  
• Workaround added for OSX OpenCL runtime: Failed to compile hash-mode 10420 = PDF 1.1 - 1.3 (Acrobat 2 - 4)
  
• Workaround added for OSX OpenCL runtime: Failed to compile hash-mode 1100 = Domain Cached Credentials (DCC), MS Cache
  
• Workaround added for OSX OpenCL runtime: Failed to compile hash-mode 13800 = Windows 8+ phone PIN/Password
  
• Workaround added for pocl OpenCL runtime: Failed to compile hash-mode 5800 = Android PIN
  

• Improved performance for rule-based attacks for _very_ fast hashes like MD5 and NTLM by 30% or higher
  
• Improved performance for DEScrypt on AMD, from 373MH/s to 525MH/s
  
• Improved performance for raw DES-based algorithms (like LM) on AMD, from 1.6GH/s to 12.5GH/s
  
• Improved performance for raw SHA256-based algorithms using meet-in-the-middle optimization, reduces 7/64 steps
  
• Improved performance for SAP CODVN B (BCODE) and F/G (PASSCODE) due to register handling optimization up to 25%
  
• Improved performance by reducing maximum number of allowed function calls per rule from 255 to 31
  
• Improved performance by update the selection when to use #pragma unroll depending on OpenCL runtime vendor
  

• Autotune: Do not run any caching rounds in autotune in DEBUG mode if -n and -u are specified
  
• Bash completion: Removed some v2.01 leftovers in the bash completion configuration
  
• Benchmark: Do not control fan speed in benchmark mode
  
• Benchmark: On OSX, some hash-modes can't compile because of OSX OpenCL runtime. Skip them and move on to the next
  
• Building: Added Makefile target "main_shared", a small how-to-use libhashcat example
  
• Building: Added many additional compiler warning flags in Makefile to improve static code error detection
  
• Building: Added missing includes for FreeBSD
  
• Building: Added some types for windows only in case _BASETSD_H was not set
  
• Building: Changed Makefile to strip symbols in the linker instead of the compiler
  
• Building: Defined NOMINMAX macro to prevent definition min and max macros in stdlib header files
  
• Building: Enabled ASLR and DEP for Windows builds
  
• Building: Fixed almost all errors reported by cppcheck and scan-build
  
• Building: On OSX, move '-framework OpenCL' from CFLAGS to LDFLAGS
  
• Building: On OSX, use clang as default compiler
  
• Building: Support building on Msys2 environment
  
• Building: Use .gitmodules to simplify the OpenCL header dependency handling process
  
• Charsets: Added DES_full.charset
  
• Data Types: Replaced all integer macros with enumerator types
  
• Data Types: Replaced all integer variables with true bool variables in case they are used as a bool
  
• Data Types: Replaced all string macros with static const char types
  
• Data Types: Replaced all uint and uint32_t to u32
  
• Data Types: Replaced atoi() with atoll(). Eliminates sign conversion warnings
  
• Documents: Added docs/credits.txt
  
• Documents: Added docs/team.txt
  
• Documents: Changed rules.txt to match v3.20 limitations
  
• Error handling (file handling): Fixed a couple of filepointer leaks
  
• Error handling (format strings): Fixed a few printf() formats, ex: use %u instead of %d for uint32_t
  
• Error handling (memory allocation): Removed memory allocation checks, just print to stderr instead
  
• Error handling (startup): Added some missing returncode checks to get_exec_path()
  
• Fanspeed: Check both fanpolicy and fanspeed returncode and disable retain support if any of them fail
  
• Fanspeed: Minimum fanspeed for retain support increased to 33%, same as NV uses as default on windows
  
• Fanspeed: Reset PID controler settings to what they were initially
  
• Fanspeed: Set fan speed to default on quit
  
• File handling: Do a single write test (for files to be written later) directly on startup
  
• File locking: Use same locking mechanism in potfile as in outfile
  
• Hardware management: Fixed calling conventions for ADL, NvAPI and NVML on windows
  
• Hardware management: Improved checking for successfull load of the NVML API
  
• Hardware management: In case fanspeed can not be set, disable --gpu-temp-retain automatically
  
• Hardware management: In case of initialization error show it only once to the user on startup
  
• Hardware management: Refactored all code to return returncode (0 or -1) instead of data for more easy error handling
  
• Hardware management: Refactored macros to real functions
  
• Hardware management: Removed kernel exec timeout detection on NVIDIA, should no longer occur due to autotune
  
• Hardware management: Replaced NVML registry functions macros with their ascii versions (Adds NVML support for XP)
  
• Hashlist loading: Do not load data from hashfile if hashfile changed during runtime
  
• Kernel cache: Fixed checksum building on oversized device version or driver version strings
  
• Logging: Improved variable names in hashcat.log
  
• Loopback: Refactored --loopback support completely, no longer a recursive function
  
• Memory management: Fixed some memory leaks on shutdown
  
• Memory management: Got rid of all global variables
  
• Memory management: Got rid of local_free() and global_free(), no longer required
  
• Memory management: Refactored all variables with HCBUFSIZ_LARGE size from stack to heap, OSX doesn't like that
  
• OpenCL Headers: Select OpenCL headers tagged for OpenCL 1.2, since we use -cl-std=CL1.2
  
• OpenCL Kernels: Added const qualifier to variable declaration of matching global memory objects
  
• OpenCL Kernels: Got rid of one global kernel_threads variable
  
• OpenCL Kernels: Moved OpenCL requirement from v1.1 to v1.2
  
• OpenCL Kernels: Recognize reqd_work_group_size() values from OpenCL kernels and use them in the host if possible
  
• OpenCL Kernels: Refactored common function append_0x01()
  
• OpenCL Kernels: Refactored common function append_0x02()
  
• OpenCL Kernels: Refactored common function append_0x80()
  
• OpenCL Kernels: Refactored rule function append_block1()
  
• OpenCL Kernels: Refactored rule function rule_op_mangle_delete_last()
  
• OpenCL Kernels: Refactored rule function rule_op_mangle_dupechar_last()
  
• OpenCL Kernels: Refactored rule function rule_op_mangle_rotate_left()
  
• OpenCL Kernels: Refactored rule function rule_op_mangle_rotate_right()
  
• OpenCL Kernels: Support mixed kernel thread count for mixed kernels in the same source file
  
• OpenCL Kernels: Switch from clz() to ffz() for bitsliced algorithms
  
• OpenCL Kernels: Using platform vendor name is better than using device vendor name for function detection
  
• OpenCL Runtime: Updated AMDGPU-Pro and AMD Radeon driver version check
  
• OpenCL Runtime: Updated Intel OpenCL runtime version check
  
• OpenCL Runtime: Updated NVIDIA driver version check
  
• Password candidates: The maximum word length in a wordlist is 31 not 32, because 0x80 will eventually be appended
  
• Potfile: Base logic switched; Assuming the potfile is larger than the hashlist it's better to load hashlist instead of potfile entries
  
• Potfile: In case all hashes were cracking using potfile abort and inform user
  
• Restore: Automatically unlink restore file if all hashes have been cracked
  
• Restore: Do not unlink restore file if restore is disabled
  
• Rules: Refactored macros to real functions
  
• Status: Added Input.Queue.Base and Input.Queue.Mod to help the user better understand this concept
  
• Status: Do not wait for the progress mutex to read and store speed timer
  
• Status: Do not show Recovered/Time when cracking < 1000 hashes
  
• Status: Do not show Recovered/Time as floats but as integers to reduce over-information
  
• Tests: Removed rules_test/ subproject: Would require total rewrite but not used in a long time
  
• Threads: Replaced all calls to getpwuid() with getpwuid_r() to ensure thread safety
  
• Threads: Replaced all calls to gmtime() with gmtime_r() to ensure thread safety
  
• Threads: Replaced all calls to strtok() with strtok_r() to ensure thread safety
  
• Wordlists: Use larger counter variable to handle larger wordlists (that is > 2^32 words)
  
• X11: Detect missing coolbits and added some help text for the user how to fix it