<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFCC" text="#000000">
<div>
<h2 style="MARGIN-BOTTOM: 0pt; MARGIN-LEFT: 0in; MARGIN-RIGHT:
0in"><span><a moz-do-not-send="true"
href="http://rss.slashdot.org/%7Er/slashdot/eqWf/%7E3/cC50oUE-O1A/story01.htm"
rel="nofollow" target="_blank">New 25-GPU Monster Devours
Strong Passwords In Minutes</a></span></h2>
</div>
<div style="MARGIN-BOTTOM: 6pt">
<p class="MsoNormal"><span>via <a moz-do-not-send="true"
href="http://slashdot.org/" rel="nofollow" target="_blank">Slashdot</a>
by Soulskill on 12/5/12</span></p>
</div>
<p class="MsoNormal"><span><br>
chicksdaddy writes "A presentation at the Passwords^12
Conference in Oslo, Norway (slides), has moved the goalposts on
password cracking yet again. Speaking on Monday, researcher
Jeremi Gosney (a.k.a epixoip) demonstrated a rig that leveraged
the Open Computing Language (OpenCL) framework and a technology
known as Virtual Open Cluster (VCL) to run the HashCat password
cracking program across a cluster of five, 4U servers equipped
with 25 AMD Radeon GPUs communicating at 10 Gbps and 20 Gbps
over Infiniband switched fabric. Gosney's system elevates
password cracking to the next level, and effectively renders
even the strongest passwords protected with weaker encryption
algorithms, like Microsoft's LM and NTLM, obsolete. In a test,
the researcher's system was able to generate 348 billion NTLM
password hash checks per second. That renders even the most
secure password vulnerable to compute-intensive brute force and
wordlist (or dictionary) attacks. A 14 character Windows XP
password hashed using LM for example, would fall in just six
minutes, said Per Thorsheim, organizer of the Passwords^12
Conference. For some context: In June, Poul-Henning Kamp,
creator of the md5crypt() function used by FreeBSD and other,
Linux-based operating systems, was forced to acknowledge that
the hashing function is no longer suitable for production use —
a victim of GPU-powered systems that could perform 'close to 1
million checks per second on COTS (commercial off the shelf) GPU
hardware,' he wrote. Gosney's cluster cranks out more than 77
million brute force attempts per second against MD5crypt."</span></p>
<div>
<p class="MsoNormal"><span></span><a moz-do-not-send="true"
href="http://twitter.com/home?status=New+25-GPU+Monster+Devours+Strong+Passwords+In+Minutes%3A+http%3A%2F%2Fbit.ly%2FTOL1U6"
rel="nofollow" target="_blank"><span></span></a><a
moz-do-not-send="true"
href="http://it.slashdot.org/story/12/12/05/0623215/new-25-gpu-monster-devours-strong-passwords-in-minutes?utm_source=rss1.0moreanon&utm_medium=feed"
rel="nofollow" target="_blank">Read more of this story</a> at
Slashdot.</p>
</div>
<pre class="moz-signature" cols="72">--
Islam is a VERY backward religion, that MUST keep it's masses not only
in subjugation, but ignorant and maintain a feudal state that is always
at war, looking to take over the spoils of all other societies. It is by
nature destructive and not constructive. The Q'oran is based on distortions
of the Bible, lies, paganism, racism, hate, contradictions, and ignorance,
with a good dose of stupidity thrown in for good measure. -Fred A. Miller</pre>
</body>
</html>