logo

Update: New 25 GPU Monster Devours Passwords In Seconds

ID: d210603f-ea01-565c-89f3-76f396ade304

STIX ID: report--d210603f-ea01-565c-89f3-76f396ade304

Feed Name: Security Ledger

Threat Score
65/100

Date Published: 2012-12-05

Date Updated: 2026-04-26

Author: Paul Roberts

...
...

This article describes Jeremi Gosney’s demonstration of a 25-GPU cluster using Virtual OpenCL (VCL) and Hashcat to perform massively parallel offline password cracking, achieving rates such as 348 billion NTLM hashes/sec and billions/sec for MD5 and SHA1; it highlights how such compute power renders weaker hashing algorithms (LM, NTLM, MD5, md5crypt) and many common passwords effectively obsolete, discusses benchmarking against slower hashes (bcrypt, sha512crypt), and notes implications for leaked/stolen password hash collections and password policy.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.