RE: ADS Password Storage Protection

["Roger A. Grimes" <roger () banneretcs com>]

Current crackers use single character symbols to create the larger
password (e.g. abcdef). This type of attempt cannot be easily made
against 10 character and larger passwords. In my particular challenge, I
told everyone the second and third challenges are composed of complete
english words. In order to have a hope of cracking them in a reasonable
period of time, the cracker needs to use english words like single
characters (e.g.hookscarpetfish), putting together all the possible
words that could be used to create a 15-character passphrase, and then
hash each result, and compare it to the hashes I've given.

Roger

*****************************************************************
*Roger A. Grimes, InfoWorld, Security Columnist 
*CPA, CISSP, MCSE: Security (2000/2003/MVP), CEH, yada...yada...
*email: roger_grimes () infoworld com or roger () banneretcs com
*Author of Professional Windows Desktop and Server Hardening (Wrox)
*http://www.amazon.com/gp/product/0764599909
*****************************************************************



-----Original Message-----
From: Pranav Lal [mailto:pranav.lal () gmail com] 
Sent: Sunday, July 23, 2006 1:45 PM
To: security-basics () securityfocus com
Subject: RE: ADS Password Storage Protection

Hi Roger,
<snip The program would use a password dictionary and treat each word as
character, PL] could you clarify what you mean by treating each word as
a character?

Pranav


------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has
designated Norwich University a center of Academic Excellence in
Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------