Full Disclosure mailing list archives

Cracking the entire set of DES-based crypt(3) hashes. Interested ?


From: "n/a n/a" <xor.rax.rax () gmail com>
Date: Mon, 30 Jul 2007 00:09:18 -0700

Let's imagine there is someone out there able to crack any hash of the
entire set of DES-based crypt(3) hashes in a reasonable amount of time,
say 5-10 days.

Let's imagine that no matter how many hashes are submitted to the system,
1 or 1000, all of them are guaranteed to be cracked in this constant
amount of time.

Let's also imagine this service becomes commercially available.

Even though DES-based crypt(3) is outdated and obsolete, its use is still
widespread in typical large heterogeneous IT environments. So I guess this
service would interest lots of legitimate clients such as pentesters,
government agencies, IT departments in large companies or universities,
and the likes.

How much would you value this service ? Would you pay $100, $10, $1 per
hash to crack ? Would you require anonymity to use the service ?

-XRR

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: