Re: password cracking: one char at a time.

[michael young <mhyoung () valdosta edu>]

Clement Dupuis wrote:

> Good day Michael,
>
> Most password encryption use a hashing algorithm which computes a hash value
> on the WHOLE password and not part of it.  Windows hashes use to break the
> password in two 7 character value before creating the hash but most OS does
> not do this.
>
> This means that you must have the proper password and cannot attempt
> cracking a one character at the time.  On top of this, some implementation
> use a seed value for some randomness, even if you have the correct password,
> you might not be able to guess without the seed value.
>
> I am not sure what you mean by a one way versus two way password?
>  
It is my understanding that some algorithms create a hash that allows 
you to use
the hash to unencrypt the password. With other algorithms it is not 
possable to
unencrypt the hash to get the original password. Is this wrong?

> Take care
>
> Clement
>
>
> Clément Dupuis, CD
> President/Security Evangelist/Chief Learning Officer (CLO)
> CCCure Enterprise Security & Training Inc.
> CISSP, GCFW, GCIA, Security+, CEH, CCSA, MBNS, MBIS, MBHS, CCSE, ACE
> Tel: 954 364 8410 (Florida)
> Tel: 514 907 1671 (Montreal)
> Tel: 418 907 0263 (Quebec)
> Fax: 636 773 6328 
>
> Maintainer of :
>
> The CISSP and SSCP Open Study Guides Web Site
> http://www.cccure.org    
>
> The Professional Security Testers Warehouse
> http://www.professionalsecuritytesters.org   
>  
>
>  
>
> > -----Original Message-----
> > From: michael young [mailto:mhyoung () valdosta edu]
> > Sent: Monday, November 21, 2005 1:27 PM
> > To: security-basics () securityfocus com
> > Subject: password cracking: one char at a time.
> >
> > Hi all,
> >    I was wondering if is at all possible to discover a password one
> > char at a time.
> > Normally, you either get the password right or wrong (all or nothing).
> > Does anyone know if this can be done? Does it depend on the encryption
> > algorithm
> > used to encrypt the password? Is that a difference for 1 and/or 2 way
> > passwords?
> >
> > thank you,
> > Michael
> >
> >    
>
>
>
>