+ Added optional parallelization of the MD5-based crypt(3) code with OpenMP. + Added optional parallelization of the bitslice DES code with OpenMP. + Replaced the bitslice DES key setup algorithm with a faster one, which significantly improves performance at LM hashes, as well as at DES-based crypt(3) hashes when there's just one salt (or very few salts). + Optimized the DES S-box x86-64 (16-register SSE2) assembly code. + Added support for 10-character DES-based tripcodes (not optimized yet). + Added support for the "$2y$" prefix of bcrypt hashes. + Added two more hash table sizes (16M and 128M entries) for faster processing of very large numbers of hashes per salt (over 1M). + Added two pre-defined external mode variables: "abort" and "status", which let an external mode request the current cracking session to be aborted or the status line to be displayed, respectively. + Made some minor optimizations to external mode function calls and virtual machine implementation. + The "--make-charset" option now uses floating-point rather than 64-bit integer operations, which allows for larger CHARSET_* settings in params.h. + Added runtime detection of Intel AVX and AMD XOP instruction set extensions, with optional fallback to an alternate program binary. + Added relbench, a Perl script to compare two "john --test" benchmark runs, such as for different machines, "make" targets, C compilers, optimization options, or/and versions of John the Ripper. + Additional public lists of "top N passwords" have been merged into the bundled common passwords list, and some insufficiently common passwords were removed from the list. + Many minor enhancements and a few bug fixes were made. - updated jumbo patch to 1.7.9-jumbo-6 - specfile cleanup (using spec-cleaner) OBS-URL: https://build.opensuse.org/package/show/security/john?expand=0&rev=28
351 lines
13 KiB
Plaintext
351 lines
13 KiB
Plaintext
-------------------------------------------------------------------
|
|
Fri Jul 13 06:07:17 UTC 2012 - lars@linux-schulserver.de
|
|
|
|
- update to 1.7.9:
|
|
+ Added optional parallelization of the MD5-based crypt(3) code with OpenMP.
|
|
+ Added optional parallelization of the bitslice DES code with OpenMP.
|
|
+ Replaced the bitslice DES key setup algorithm with a faster one, which
|
|
significantly improves performance at LM hashes, as well as at DES-based
|
|
crypt(3) hashes when there's just one salt (or very few salts).
|
|
+ Optimized the DES S-box x86-64 (16-register SSE2) assembly code.
|
|
+ Added support for 10-character DES-based tripcodes (not optimized yet).
|
|
+ Added support for the "$2y$" prefix of bcrypt hashes.
|
|
+ Added two more hash table sizes (16M and 128M entries) for faster processing
|
|
of very large numbers of hashes per salt (over 1M).
|
|
+ Added two pre-defined external mode variables: "abort" and "status", which
|
|
let an external mode request the current cracking session to be aborted or the
|
|
status line to be displayed, respectively.
|
|
+ Made some minor optimizations to external mode function calls and virtual
|
|
machine implementation.
|
|
+ The "--make-charset" option now uses floating-point rather than 64-bit
|
|
integer operations, which allows for larger CHARSET_* settings in params.h.
|
|
+ Added runtime detection of Intel AVX and AMD XOP instruction set extensions,
|
|
with optional fallback to an alternate program binary.
|
|
+ Added relbench, a Perl script to compare two "john --test" benchmark runs,
|
|
such as for different machines, "make" targets, C compilers, optimization
|
|
options, or/and versions of John the Ripper.
|
|
+ Additional public lists of "top N passwords" have been merged into the
|
|
bundled common passwords list, and some insufficiently common passwords were
|
|
removed from the list.
|
|
+ Many minor enhancements and a few bug fixes were made.
|
|
- updated jumbo patch to 1.7.9-jumbo-6
|
|
- specfile cleanup (using spec-cleaner)
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Sep 30 09:40:39 UTC 2011 - joop.boonen@boonen.org
|
|
|
|
- Added a fix for the arm architecture, TARGET generic
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 8 08:56:40 UTC 2011 - lars@linux-schulserver.de
|
|
|
|
- update to 1.7.8:
|
|
+ many changes, please see /usr/share/doc/packages/john/CHANGES
|
|
+ The bitslice DES S-box expressions have been replaced with those
|
|
generated by Roman Rusakov specifically for John the Ripper
|
|
+ Added Intel AVX and AMD XOP instruction sets support for bitslice DES
|
|
+ Apache "$apr1$" MD5-based password hashes are now supported.
|
|
+ the loader now includes logic to warn the user of ambiguous
|
|
hash encodings
|
|
+ "DateTime", "Repeats", "Subsets", "AtLeast1-Simple",
|
|
"AtLeast1-Generic", and "Policy" external mode samples have been
|
|
added to the default john.conf
|
|
+ A few minor bug fixes and enhancements were made
|
|
+ Corrected a logic error introduced in JtR 1.7.4.2: in
|
|
"single crack" mode
|
|
- added and updated jumbo patch
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Mar 15 06:42:36 CET 2011 - draht@suse.de
|
|
|
|
- go from jumbo patch 7 to 12
|
|
- needs -lm to link, via LDFLAGS from make command in spec
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Sep 9 16:39:40 UTC 2010 - lars@linux-schulserver.de
|
|
|
|
- update to 1.7.6:
|
|
+ Generic crypt(3) support (enabled with "--format=crypt") has been
|
|
added for auditing password hash types supported by the system but
|
|
not yet supported by John's own optimized cryptographic routines
|
|
(such as "SHA-crypt" and SunMD5).
|
|
+ Optional parallelization of the above has been implemented by
|
|
means of OpenMP along with glibc's crypt_r(3)
|
|
+ Optional parallelization of John's own optimized code for the
|
|
OpenBSD-style Blowfish-based crypt(3) (bcrypt) hashes with OpenMP
|
|
has been added
|
|
+ A more suitable version of 32-bit x86 assembly code for Blowfish
|
|
is now chosen on Core i7 and similar CPUs (in 32 bit mode)
|
|
+ More optimal DES S-box expressions for PowerPC with AltiVec
|
|
+ The bitslice DES C source code has been reworked to allow for
|
|
the use of arbitrary SIMD intrinsics, which was previously only
|
|
implemented for AltiVec as a special case
|
|
+ Support for SSE2 and MMX intrinsics with bitslice DES (as an
|
|
alternative to the supplied assembly code) has been added
|
|
(currently only enabled for SSE2 on x86-64)
|
|
+ Support for mixed-type longer virtual vectors (such as SSE2+MMX,
|
|
SSE2+ALU, AltiVec+ALU, and other combinations) with bitslice
|
|
DES has been added
|
|
+ The loader will now detect password hashes specified on a line
|
|
on their own, not only as part of an /etc/passwd or PWDUMP
|
|
format file
|
|
+ When run in "--stdin" mode and reading candidate passwords from
|
|
a terminal (to be typed by the user), John will no longer mess
|
|
with the terminal settings
|
|
+ John will now restore terminal settings not only on normal
|
|
termination or interrupt, but also when forcibly interrupted
|
|
with two Ctrl-C keypresses
|
|
+ A new numeric variable has been added to the word mangling rules
|
|
engine: "p" for position of the character last found with the
|
|
"/" or "%" commands
|
|
+ Support for the use of "--format" along with "--show" or
|
|
"--make-charset" has been added
|
|
+ The choice of .rec and .log filenames for custom session names
|
|
has been made more intuitive
|
|
+ Support for "\r" (character lists with repeats) and "\p0"
|
|
(reference to the immediately preceding character list/range)
|
|
has been added to the word mangling rules preprocessor
|
|
+ The undefined and undocumented behavior of some subtle word
|
|
mangling rules preprocessor constructs has been changed to
|
|
arguably be more sensible
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Feb 11 21:53:39 CET 2010 - lrupp@suse.de
|
|
|
|
- update to 1.7.4.2:
|
|
+ Major performance improvements
|
|
+ John will now tend to use more memory to achieve better speed
|
|
+ Some previously missed common website passwords found on public
|
|
lists of "top N passwords" have been added to the bundled common
|
|
passwords list.
|
|
+ Support for back-references and "parallel" ranges has been
|
|
added to the word mangling rules preprocessor.
|
|
+ The notion of numeric variables has been introduced into the
|
|
rules engine.
|
|
+ New rule commands have been added
|
|
+ New rule reject flags have been added
|
|
+ The default rulesets for "single crack" and wordlist modes have
|
|
been revised to make use of the new features, for speed, to
|
|
produce fewer duplicates, and to attempt additional kinds of
|
|
candidate passwords.
|
|
+ The default for the Idle setting has been changed from N to Y.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Feb 8 22:44:32 UTC 2010 - jengelh@medozas.de
|
|
|
|
- only build MMX variant on >= i586
|
|
- guard TARGET=linux-x86-any with %ix86
|
|
- enable building on sparcv9
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 28 23:59:28 CEST 2009 - lrupp@suse.de
|
|
|
|
- update to 1.7.3.4:
|
|
+ "make check" has been implemented
|
|
+ The "--test" option will now take an optional argument - the
|
|
duration of each benchmark in seconds
|
|
+ Some very minor bugs that did not affect normal operation have
|
|
been fixed.
|
|
+ Some unimportant compiler warnings have been fixed, a source code
|
|
comment has been made more verbose and more complete.
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 9 19:48:06 CEST 2008 - lrupp@suse.de
|
|
|
|
- update to 1.7.3.1:
|
|
+ Two Blowfish-based crypt(3) hashes may now be computed in
|
|
parallel for much better performance on modern multi-issue CPUs
|
|
with a sufficient number of registers (e.g., x86_64).
|
|
+ New make targets: macosx-universal, macosx-x86-64, solaris-x86-64-cc,
|
|
solaris-x86-64-gcc, solaris-x86-sse2-cc, solaris-x86-sse2-gcc,
|
|
solaris-x86-mmx-cc, solaris-x86-mmx-gcc, solaris-x86-any-cc,
|
|
linux-ia64;
|
|
+ Minor bug fixes.
|
|
+ "DumbForce" and "KnownForce" external mode samples have been
|
|
added to the default john.conf.
|
|
- removed the outdated patchset (needs to be re-integrated)
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 25 14:48:20 CEST 2006 - lrupp@suse.de
|
|
|
|
- remove double cflags definition
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 8 23:27:39 CEST 2006 - lrupp@suse.de
|
|
|
|
- new version 1.7.2
|
|
- moved john.conf to /etc
|
|
- moved john binary to /usr/bin
|
|
- enabled some opt flags (must be tested)
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 17 14:23:08 CEST 2006 - schwab@suse.de
|
|
|
|
- Use RPM_OPT_FLAGS.
|
|
- Don't strip binaries.
|
|
- Fix last change.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 27 13:36:31 CEST 2006 - lrupp@suse.de
|
|
|
|
- use CFLAGS instead of params.h.patch
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Mar 24 10:06:36 CET 2006 - lrupp@suse.de
|
|
|
|
- charset.tar.bz2 is included upstream
|
|
- reduce build requires
|
|
- new version 1.7.0.2
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 13 22:12:21 CET 2006 - lrupp@suse.de
|
|
|
|
- new version 1.7.0.1
|
|
- adapt patches to new version
|
|
- disabled some compiler fixes
|
|
- removed RPM_OPT_FLAGS => performance issue atm
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Mar 13 21:33:53 CET 2006 - lrupp@suse.de
|
|
|
|
- split off worlists to an extra package
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jan 25 21:37:03 CET 2006 - mls@suse.de
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
-------------------------------------------------------------------
|
|
Sun Jan 15 00:39:20 CET 2006 - schwab@suse.de
|
|
|
|
- Don't strip binaries.
|
|
- Fix ia64 configuration.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Dec 19 18:58:36 CET 2005 - aosthof@suse.de
|
|
|
|
- Fixed .spec file for all architectures besides x86
|
|
- Added targets for ia64 / s390 / s390x
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 11 10:23:55 CET 2005 - kukuk@suse.de
|
|
|
|
- Fix compiling with glibc 2.4 snapshot
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Sep 14 13:29:31 CEST 2005 - lrupp@suse.de
|
|
|
|
- new version 1.6.39
|
|
- use noreplace for config
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Jun 15 14:59:28 CEST 2005 - meissner@suse.de
|
|
|
|
- use RPM_OPT_FLAGS.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Jun 6 01:29:49 CEST 2005 - ro@suse.de
|
|
|
|
- added directory to filelist
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jun 3 18:32:29 CEST 2005 - lrupp@suse.de
|
|
|
|
- changed manpage
|
|
- added patches from ftp.openwall.com again:
|
|
+ blowfish (Eggdrop blowfish)
|
|
+ md5 (work with md5 hash of apache; faster)
|
|
+ rawMD5
|
|
+ MySQL (about 75% faster than mysqlpassword.c)
|
|
- enabled global mode in params.g again
|
|
|
|
-------------------------------------------------------------------
|
|
Mon May 30 16:23:28 CEST 2005 - lrupp@suse.de
|
|
|
|
- added "all" wordlist from openwall
|
|
- enabled arch-support for sparc and ppc
|
|
- added old doc-files from 1.6
|
|
|
|
-------------------------------------------------------------------
|
|
Wed May 25 17:44:09 CEST 2005 - lrupp@suse.de
|
|
|
|
- new package, version 1.6.38
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Jan 25 20:05:46 CET 2005 - lrupp@suse.de
|
|
|
|
- added some wordlists to get more options ;-)
|
|
- added patches from ftp.openwall.com to provide support for
|
|
additiional password formats:
|
|
+ blowfish
|
|
+ md5
|
|
+ rawMD5
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Aug 2 17:24:23 CEST 2004 - lrupp@suse.de
|
|
|
|
- - fixed BugTraq-ID: 43287
|
|
- enabled global-mode in params.h
|
|
- fix misspelling in manpage
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Feb 27 15:01:19 CET 2004 - lrupp@suse.de
|
|
|
|
- use devel version: no segfault on x86-64
|
|
- included documentation and charsets from old version
|
|
- renamed new john.conf in john.ini
|
|
- created a short manpage for john
|
|
- created symlink /var/lib/john/john
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Nov 10 17:25:12 CET 2003 - ro@suse.de
|
|
|
|
- use defattr
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Nov 7 16:44:12 CET 2003 - lrupp@suse.de
|
|
|
|
- added '# norootforbuild' in the spec-file
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Jun 12 17:36:58 CEST 2003 - poeml@suse.de
|
|
|
|
- add /var/lib/john to the filelist
|
|
|
|
-------------------------------------------------------------------
|
|
Fri May 23 10:31:10 CEST 2003 - coolo@suse.de
|
|
|
|
- use BuildRoot
|
|
|
|
-------------------------------------------------------------------
|
|
Tue Sep 17 17:34:28 CEST 2002 - ro@suse.de
|
|
|
|
- removed bogus self-provides
|
|
|
|
-------------------------------------------------------------------
|
|
Fri Jul 5 12:50:10 CEST 2002 - kukuk@suse.de
|
|
|
|
- use %ix86
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 29 15:17:43 CEST 2001 - uli@suse.de
|
|
|
|
- fixed for gcc >2.95
|
|
- replaced config.guess stuff with %ifarch
|
|
|
|
-------------------------------------------------------------------
|
|
Wed Mar 1 18:27:26 CET 2000 - werner@suse.de
|
|
|
|
- Fix config.guess selection
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Sep 13 17:23:57 CEST 1999 - bs@suse.de
|
|
|
|
- ran old prepare_spec on spec file to switch to new prepare_spec.
|
|
|
|
-------------------------------------------------------------------
|
|
Thu Mar 18 18:58:26 MET 1999 - uli@suse.de
|
|
|
|
- new package, version 1.6
|
|
|