Comments on: Eight Character Passwords http://stacyprowell.com/blog/2009/10/19/eight-character-passwords/ Ugh, Stacy's talking again... Tue, 07 Sep 2010 15:37:33 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: stacy http://stacyprowell.com/blog/2009/10/19/eight-character-passwords/comment-page-1/#comment-81 stacy Tue, 10 Nov 2009 14:27:59 +0000 http://stacyprowell.com/blog/?p=432#comment-81 Doug: MD5 has been parallelized. Just google parallel MD5. Also, have a look here: http://www.isi.edu/touch/pubs/sigcomm95.html Doug: MD5 has been parallelized. Just google parallel MD5. Also, have a look here:
http://www.isi.edu/touch/pubs/sigcomm95.html

]]> By: Doug http://stacyprowell.com/blog/2009/10/19/eight-character-passwords/comment-page-1/#comment-79 Doug Thu, 29 Oct 2009 03:13:09 +0000 http://stacyprowell.com/blog/?p=432#comment-79 I think it would be hard to parallelize MD5. http://en.wikipedia.org/wiki/Md5 Hard, but not impossible. I think that forensics guys are looking at this, since they have to run MD5's for hard drives, and that takes time. If you stripe them then you can at least parallelize the MD5's of the stripes. I guess. But yes, I'm sure there are some agencies that have exactly such a database. I hadn't really thought about how easy it was until I read your post. Of course they've done this. That's just walking-around money. I think it would be hard to parallelize MD5.
http://en.wikipedia.org/wiki/Md5

Hard, but not impossible. I think that forensics guys are looking at this, since they have to run MD5’s for hard drives, and that takes time. If you stripe them then you can at least parallelize the MD5’s of the stripes. I guess.

But yes, I’m sure there are some agencies that have exactly such a database. I hadn’t really thought about how easy it was until I read your post. Of course they’ve done this. That’s just walking-around money.

]]>