All releases of John the Ripper

  •  22 Jun 2011 16:36
Avatar

    Release Notes: The bitslice DES S-box expressions and code have been replaced, reducing the gate count by 17% and typically speeding up DES-based crypt(3) cracking by 13%. Support for bcrypt hashes of passwords containing non-ASCII characters has been corrected, and a backwards compatibility feature for broken bcrypt hashes of such passwords has been added. The external mode virtual machine's performance has been improved through additional multi-op instructions. AppendLuhn external mode has been added, which appends the Luhn algorithm digit. A few minor bugfixes and enhancements were made.

    •  09 Jun 2011 00:23
    Avatar

      Release Notes: Support for cracking OpenSSH's passphrase-protected SSH protocol 2 private keys (with OpenMP parallelization), password-protected PDF files with RC4 encryption, and some password-protected RAR archives has been added. Support for SybaseASE, hmailserver, and MediaWiki "B" type password hashes has been added. There were also many minor enhancements.

      •  03 Jun 2011 00:42
      Avatar

        Release Notes: MD5 and SHA-1 based hashes have been sped up with SSE2 intrinsics. md5_gen has been expanded with more hash types. UTF-8 support has been added ("--utf8"). MPI parallelization support for all cracking modes has been integrated. OpenMP parallelization support has been added to more hash types. New formats have been added: mskrb5 (offline attack on MS Kerberos 5 pre-authentication data), rawMD5unicode (MD5 of UCS-2 encoded plaintext), and salted_sha1 (faster handling of some LDAP {SSHA} hashes). The "unique" program, Markov mode, ETA display, and programming interfaces have been enhanced.

        •  28 Apr 2011 04:39
        Avatar

          Release Notes: The jumbo patch has been rebased to 1.7.7. Detection of ambiguous hash encodings has been implemented. Support for larger hash tables has been added for many hash types (most notably, NTLM). The "Apache MD5" "format" has been dropped (implemented in 1.7.7 proper). The --salt-list option has been dropped. Assorted other bugfixes, enhancements, and changes have been made.

          •  28 Apr 2011 04:24
          Avatar

            Release Notes: Intel AVX (Sandy Bridge) and AMD XOP (Bulldozer) support for bitslice DES has been added. Plaintext passwords may now be "cracked" (for faster testing and tuning). Apache "$apr1$" MD5-based password hashes are now officially supported. Additional warnings and hints are now printed when appropriate. The unique and unshadow programs have been made significantly faster. New external mode samples have been added: DateTime, Repeats, Subsets, AtLeast1-Simple, AtLeast1-Generic, and Policy. Assorted minor bugfixes and enhancements were made.

            •  17 Feb 2011 04:10
            Avatar

              Release Notes: The "generic MD5" self-test bug with "-sse2" and "-mmx" builds (introduced in -jumbo-10) has been corrected. MSCash and MSCash2 OpenMP parallelization has been enhanced to adjust the number of key slots according to the number of threads.

              •  07 Feb 2011 20:54
              Avatar

                Release Notes: An x86-64-specific NTLM hash comparison bug has been fixed. Self-tests have been enhanced to detect such bugs in the future. Support for cracking of MSCash2 (Domain Cached Credentials of modern Windows systems) with optional OpenMP parallelization has been added. Similar OpenMP parallelization for the original MSCash has been added. OpenMP-enabled RPM packages for x86-64 Fedora 13 and 14 have been built.

                •  14 Jun 2010 05:09
                Avatar

                  Release Notes: crypt(3) support has been added e.g. for SHA-crypt and SunMD5, with OpenMP parallelization on Linux and Solaris. John's Blowfish code has also been parallelized with OpenMP. A more suitable version of x86 assembly Blowfish code is now chosen on Core i7. More optimal DES S-boxes for PowerPC/AltiVec have been integrated. The bitslice DES code has been reworked to allow for the use of arbitrary SIMD intrinsics and mixed-type vectors (e.g., 192-bit with SSE2+MMX). The loader will now detect hashes on a line on their own. The handling of tty settings with "--stdin" and Ctrl-C has been improved.

                  •  26 Feb 2010 03:04
                  Avatar

                    Release Notes: Support for the use of "--format" along with "--show" or "--make-charset" has been added. The choice of .rec and .log filenames has been made more intuitive. A new numeric variable has been added to the rules engine: position of the character last found with the "reject unless" commands. Support for character lists with repeats and for reference to the immediately preceding list/range has been added to the rules preprocessor. The behavior of some subtle preprocessor constructs has been changed. Some bugs were fixed, most notably a crash when no password hashes are loaded (introduced in 1.7.4.2).

                    •  19 Jan 2010 10:23
                    Avatar

                      Release Notes: Major performance improvements for processing of very large password files or sets of files have been implemented. Some previously missed common Web site passwords found on public lists of "top N passwords" have been added to the bundled common passwords list. Some bugs introduced in 1.7.4 have been fixed.

                      Screenshot

                      Project Spotlight

                      episoder

                      A tool to tell you about new episodes of your favourite TV shows.

                      Screenshot

                      Project Spotlight

                      BalanceNG

                      A modern software IP load balancer.