Inconsistent results for NTLM with cudaHashcat-plus64.bin 0.07
#1
I was using cudaHashcat-plus64.bin 0.07 to crack NTLM hashes with my own wordlist, and found it returns inconsistent results. It doesn't seem to be dependent on the hashfile, but does seem to be somewhat dependent on the wordlist file.

This was tested on two machines. The first is i7 2600, 8gb ram, GTX 295, Fedora 16, and nvidia driver 290.10. The second is Q6600, 8gb ram, GTX 260, Fedora 16, and nvidia driver 290.10.

To reproduce, download the files at the url below. First uncompress test-wordlist.txt.gz. Then run ./tesh.sh under Linux. Watch the output. It should give you the number in the loop and three passwords each time. Out of fifteen runs I had three cases of only two passwords.

http://higgs.cygnusx-1.org/~edgan/oclHashcat/
#2
(02-27-2012, 05:19 AM)edgan Wrote: nvidia driver 290.10.

This is your issue. Use 275.33. Something changed with drivers after this version that is causing hashcat to miss hashes even though they have been found.
#3
Exactly. Thats why both, the homepage and the readme, says:

"NV users require ForceWare 275.33 on Windows or 275.43 on Linux"

It was also send out via Twitter.

Additionally I should mention that with the latest WHQL driver 295.73 on Windows and 295.20 on Linux the issue still exists
#4
I got this wrong once and felt stupid after speaking to atom Smile Always read the "GPU Driver and SDK Requirements" for all hashcat projects.
#5
I orginally read that as at least that version.

I think the version of CUDA went up, and I get good results with Cryptohaze Multiforcer. You should really consider this a bug. Newer drivers are also required for newer cards. They are also regularly fixing bugs.

Ubuntu Oneiric 11.10 comes with 280 out of the box, and Fedora 16 via RPMFusion is 290.10. Installing by hand is also less than ideal, because you end up having to recompile the kernel module by hand each time you upgrade your kernel. Where as with packages it just works.

Cards that require newer than 275:
GeForce GTX 570M
GeForce GTX 580M
GeForce GT 520MX
GeForce GTX 460 SE v2
Tesla X2090
#6
You are right, this is a bug. Just not inside oclhashcat. So there is no way to fix it. Cryptohaze Multiforcer does not support dictionary so you cant compare.
#7
(02-27-2012, 09:23 PM)edgan Wrote: I orginally read that as at least that version.

I think the version of CUDA went up, and I get good results with Cryptohaze Multiforcer. You should really consider this a bug. Newer drivers are also required for newer cards. They are also regularly fixing bugs.

Ubuntu Oneiric 11.10 comes with 280 out of the box, and Fedora 16 via RPMFusion is 290.10. Installing by hand is also less than ideal, because you end up having to recompile the kernel module by hand each time you upgrade your kernel. Where as with packages it just works.

Cards that require newer than 275:
GeForce GTX 570M
GeForce GTX 580M
GeForce GT 520MX
GeForce GTX 460 SE v2
Tesla X2090

Actually you dont need to compile it by hand. The nvidia installer does it for you. As atom said, we worked on this issue for about 8 hours one night and found the only solution was to revert to 275 drivers.
#8
Fixed with oclHashcat-plus v0.071 *HOTFIX*