Update: New 25 GPU Monster Devours Passwords In Seconds
ID: d210603f-ea01-565c-89f3-76f396ade304
STIX ID: report--d210603f-ea01-565c-89f3-76f396ade304
Feed Name: Security Ledger
This article describes Jeremi Gosney’s demonstration of a 25-GPU cluster using Virtual OpenCL (VCL) and Hashcat to perform massively parallel offline password cracking, achieving rates such as 348 billion NTLM hashes/sec and billions/sec for MD5 and SHA1; it highlights how such compute power renders weaker hashing algorithms (LM, NTLM, MD5, md5crypt) and many common passwords effectively obsolete, discusses benchmarking against slower hashes (bcrypt, sha512crypt), and notes implications for leaked/stolen password hash collections and password policy.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
