scrypt hash format

[arlininger]

Does hashcat support hashes in the format 

Code:

scrypt$01zMhhtsm7hd$11$8$1$64$zpJQwicV2twXVpabH8/kCTaKUlx99Xplim50HJY4BA81xJxIG/R2BQ4QHOW3h15AGusc5lhYso3UJjkiTRXXTQ==

?

Note, this particular hash is from the 2019 Crack me if you Can competition, which is the first time I've encountered scrypt hashes.

I don't see hashes of this format on the https://hashcat.net/wiki/doku.php?id=example_hashes page, but possibly this can be trivially transformed in to one that is there?

Adam

[undeath]

You have to reformat the hashes for cracking with hascat. Hashcat's format is SCRYPT:n:r:p:salt:hash

salt and hash are base64-encoded. I think hashcat only supports hash lengths of 32 bytes. You have to truncate the hash value to 32 bytes in the case of cmiyc hashes.

[royce]

Example method - script by atom.

Code:

#!/usr/bin/perl use strict; use warnings; use MIME::Base64; while (my $line = <>) { chomp $line; my @data = split '\$', $line; if ($data[5] ne 64) { die "invalid\n"; } my ($user, undef) = split '\:', $data[0]; my $hash_bin = decode_base64($data[6]); my $hash_trunc = encode_base64(substr($hash_bin, 0, 32), ""); my $salt_enc = encode_base64 ($data[1], ""); printf ("%s:SCRYPT:%d:%d:%d:%s:%s\n", $user, 1<<$data[2], $data[3], $data[4], $salt_enc, $hash_trunc); }