Can't load GPG Hash??

[minime]

Hi guys,

I would really appreciate some guidance here. I spent hours in googling, trying to understand, having conversations with ChatGPT etc pp, but now I am at a dead-end and asking some smart people here for help  :-)

My setup:

Code:

hashcat (v6.2.6-813-g686bc227c) starting in backend information mode


CUDA Info:
==========

CUDA.Version.: 12.7

Backend Device ID #1 (Alias: #2)
  Name...........: NVIDIA GeForce RTX 4090
  Processor(s)...: 128
  Clock..........: 2625
  Memory.Total...: 24563 MB
  Memory.Free....: 22994 MB
  Local.Memory...: 99 KB
  PCI.Addr.BDFe..: 0000:01:00.0

OpenCL Info:
============

OpenCL Platform ID #1
  Vendor..: NVIDIA Corporation
  Name....: NVIDIA CUDA
  Version.: OpenCL 3.0 CUDA 12.7.33

  Backend Device ID #2 (Alias: #1)
    Type...........: GPU
    Vendor.ID......: 32
    Vendor.........: NVIDIA Corporation
    Name...........: NVIDIA GeForce RTX 4090
    Version........: OpenCL 3.0 CUDA
    Processor(s)...: 128
    Clock..........: 2625
    Memory.Total...: 24563 MB (limited to 6140 MB allocatable in one block)
    Memory.Free....: 24448 MB
    Local.Memory...: 48 KB
    OpenCL.Version.: OpenCL C 1.2
    Driver.Version.: 566.36
    PCI.Addr.BDF...: 01:00.0

OpenCL Platform ID #2
  Vendor..: Advanced Micro Devices, Inc.
  Name....: AMD Accelerated Parallel Processing
  Version.: OpenCL 2.1 AMD-APP (3608.0)

  Backend Device ID #3
    Type...........: GPU
    Vendor.ID......: 1
    Vendor.........: Advanced Micro Devices, Inc.
    Name...........: AMD Radeon(TM) Graphics
    Version........: OpenCL 2.0 AMD-APP (3608.0)
    Processor(s)...: 1
    Clock..........: 2200
    Memory.Total...: 24561 MB (limited to 10221 MB allocatable in one block)
    Memory.Free....: 12224 MB
    Local.Memory...: 64 KB
    OpenCL.Version.: OpenCL C 2.0
    Driver.Version.: 3608.0 (PAL,LC)
    PCI.Addr.BDF...: 69:00.0

I used the encryption tool from here:  Gpg4win - Secure email and file encryption with GnuPG for Windows
and created a symmetric encrypted file (see attached "file.txt.gpg.txt" remove the ".txt" part).

Then I used "gpg2john" to create the hash file (see attached "hash.txt") and then I tried to load it into hashcat and that's where I am stuck now:

Code:

hashcat.exe -m 17030 -a 3 hash.txt -1 1234faolMP3#$ ?1?1?1?1
hashcat (v6.2.6-813-g686bc227c) starting

hiprtcCompileProgram is missing from HIPRTC shared library.

Support for HIPRTC was dropped by AMD Adrenalin Edition 22.7.1 and later.
This is not a hashcat problem.

Please install the AMD HIP SDK

* Device #1: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
* Device #2: WARNING! Kernel exec timeout is not disabled.
            This may cause "CL_OUT_OF_RESOURCES" or related errors.
            To disable the timeout, see: https://hashcat.net/q/timeoutpatch
ADL2_Overdrive_Caps(): -8

ADL2_Overdrive_Caps(): -8

ADL2_Overdrive_Caps(): -8

ADL2_Overdrive_Caps(): -8

ADL2_Overdrive_Caps(): -8

CUDA API (CUDA 12.7)
====================
* Device #1: NVIDIA GeForce RTX 4090, 22994/24563 MB, 128MCU

OpenCL API (OpenCL 3.0 CUDA 12.7.33) - Platform #1 [NVIDIA Corporation]
=======================================================================
* Device #2: NVIDIA GeForce RTX 4090, skipped

OpenCL API (OpenCL 2.1 AMD-APP (3608.0)) - Platform #2 [Advanced Micro Devices, Inc.]
=====================================================================================
* Device #3: AMD Radeon(TM) Graphics, 12224/24561 MB (10221 MB allocatable), 1MCU

Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 256

Hashfile 'hash.txt' on line 1 ($gpg$*...18*8*9*62914560*1a5c6a8e16d90b5b): Token length exception

* Token length exception: 1/1 hashes
  This error happens if the wrong hash type is specified, if the hashes are
  malformed, or if input is otherwise not as expected (for example, if the
  --username option is used but no username is present)

No hashes loaded.

Started: Fri Dec 27 12:05:24 2024
Stopped: Fri Dec 27 12:05:30 2024

As a side-question: I wonder why it says it skipped my 4090...

[minime]

Pardon for posting the hash, I only realized now that this as per the forum rules is not allowed. The hash is innocent, though, it's a file I created myself and the password is "1234", so no harm to anyone done here.

Again, apologies.

[buka]

It looks like hashcat doesn't support this exact hash format.
But you can use John the Ripper to crack that (--format=gpg-opencl).

[DanielG]

Hashcat supports 3 types of GPG:

17010 GPG (AES-128/AES-256 (SHA-1($pass)))
17020 GPG (AES-128/AES-256 (SHA-512($pass)))
17030 GPG (AES-128/AES-256 (SHA-256($pass)))

Yours does not seem to be one of them because your hash starts with $gpg$*0* which does not match any of these 3.

with gpg2john you can add a debug flag (-d) and it wil print out information about the file such as the algorithm used. That way you can check which mode your Gpg4win used to create your file.

[minime]

It looks like hashcat doesn't support this exact hash format.
But you can use John the Ripper to crack that (--format=gpg-opencl).

I never got the GPU working with JtR...Hashcat is so much better in this regard...

[minime]

Hashcat supports 3 types of GPG:

17010 GPG (AES-128/AES-256 (SHA-1($pass)))
17020 GPG (AES-128/AES-256 (SHA-512($pass)))
17030 GPG (AES-128/AES-256 (SHA-256($pass)))

Yours does not seem to be one of them because your hash starts with $gpg$*0* which does not match any of these 3.

with gpg2john you can add a debug flag (-d) and it wil print out information about the file such as the algorithm used. That way you can check which mode your Gpg4win used to create your file.

Thank you, I will check this over the weekend and report back.

[minime]

Hashcat supports 3 types of GPG:

17010 GPG (AES-128/AES-256 (SHA-1($pass)))
17020 GPG (AES-128/AES-256 (SHA-512($pass)))
17030 GPG (AES-128/AES-256 (SHA-256($pass)))

Yours does not seem to be one of them because your hash starts with $gpg$*0* which does not match any of these 3.

with gpg2john you can add a debug flag (-d) and it wil print out information about the file such as the algorithm used. That way you can check which mode your Gpg4win used to create your file.

This is what I have got:

Code:

gpg2john.exe -d C
:\Users\xxx\Desktop\file.txt.gpg.txt

File C:\Users\xxx\Desktop\file.txt.gpg.txt
Old: Symmetric-Key Encrypted Session Key Packet(tag 3)(13 bytes) partial start
Packet type 3, len 13 at offset 2  (Processing) (pkt-type Symmetric_Key_Encrypted_Session_Key_Packet) (Partial no)
        Sym alg - AES with 256-bit key(sym 9)
        Iterated and salted string-to-key(s2k 3):
                        Salt - 1a5c6a8e16d90b5b
                Count - 62914560(coded count 254)
New: Symmetrically Encrypted and MDC Packet(tag 18)(80 bytes) partial start
Packet type 18, len 80 at offset 17  (Processing) (pkt-type Symmetrically_Encrypted_and_MDC_Packet) (Partial no)
        Ver 1
        Encrypted data [sym alg is specified in sym-key encrypted session key]
unexpected end of file.

Any idea what I can do with that?