Distributed Computing Rainbow Tables

Hi

staticblackz, thanks for the reminder! Mea culpa, excellent
comment. With the 68 symbols alphabet - configuration (116 GB)
given above, you will crack most LM hashes[1].

One more reason to disable the storage of LM hashes[2] for
downwards compatibilities! :)

To be nitpicking, but complete: The full possible alphabet for
theLM hash consists of 142 symbols. The table size then will
be about 170 times larger, ie 20 TB :D

Cheers

[1] http://www.antionline.com/showthread...r=1#post828847
[2] http://support.microsoft.com/default.../q299/6/56.asp

In addition to staticblackz post, I would also like to remind you that LM hases are all coverted to uppercase before hashing, and the special characters '/', '\', '[', ']', ':', ';', '|,' ,'=', ',','+', '*', '?', '<', '>' are not allowed. I suspect a keyspace of 142 characters is a bit generous. :)

-Maestr0

After reading the entire thread, it becomes apparent that each one having a complete rainbow table (all possible keyboard chars in any encryption format) would be entirely insane to say the least.

So why not use technology such as bittorrent, seti at home, distributed.net and build a system whereby instead of housing the entire table, we could house only 50MB or 1GB or whatever seems viable.

Set up a few distributed servers running databases that corrolate who has which segment, add in a frontend which allowes users to submit passwords, and have the frontend servers send off queries to the various backends...

This might take longer than a minute or two to get all the answers back, but it negates the need for housing 20TB of data or spending 1000hours generating tables...

You can even add various frontends (web based, ssh/telnet etc.) for various types of users as well as control the backends to allow only requests between certain times etc.

The biggest challange here would not be space or bandwidth, but making sure that the entire 20TB is online at any given point in time - with a little thought i'm sure we could combat that by allowing a logging server taking ID's (each new request has a unique ID) and matching them against what's currently online, and sending back information with regard to which segments were tried and which havn't - allowing you to resubmit it, or even have it e-mailed to you.

Just a thought....

Quote:

---

The biggest challange here would not be space or bandwidth, but making sure that the entire 20TB is online at any given point in time

---

No, spoken like a true dork.........the biggest challenge would be staying out of the Federal Pen with Bubba for company................jeez............get a life will you?

You might as well set up a store selling sawed off pump action shotguns and carnival masks :D

Who is going to host it?..............if you think the RIAA are bad.............just try some of the crap you are suggesting and see what happens :eek:

/me would rather spit in the face of the RIAA, than the NSA, FBI, SS, Interpol, CIA and whatever. Those guys don't mess around................trust me.

I have still not had a logical answer as to why anyone would LEGITIMATELY want
such a service :rolleyes:

EDIT: Please provide an answer, as it seems to me that anyone with a legitimate need for this password cracking technology will have the funds to properly host and support it.

I see no merit in making it available to sh1tbag skiddies, which is what seems to be being proposed here?

Quote:

---

I have still not had a logical answer as to why anyone would LEGITIMATELY want
such a service

---

You could also say why would anyone want Lophcrack, john the ripper, nmap, nessus, satan and the list goes on and on and on. Who was it that said, "because it's there"???

Quote:

---

I see no merit in making it available to sh1tbag skiddies, which is what seems to be being proposed here?

---

Thats not what I see here. I see two trains of interest:
1/ The distributed compiling of rainbow tables and their mathamatical effectiveness.
2/ The huge size of the results and how they could be effectivly distributed.

One of the, absolute, best things about the internet. It is based on open standards and is a medium for the free and unhindered sharing of data/information. This has lead to a multitude of un-forseen problems, script kiddies, virii, malware and crackers etc, etc and other emergant systems. However, these problems have forced people to think to a higher level, to combat these problems.

This is how I see this thread.

I have simplified this argument

Just an idea that crossed my mind what about a BitTorrent style Distributed rainbowtable. Once someone generates new table, that gives them access to a program of some type that allows access to others running the same and runs the hash on their tables so just a large network of rainbowtables interconnected. That solves the HardDrive space issues but there is also a dependency issue as the same with bittorrent. You need lots of people. Any Thoughts?