http://secure2s.net/tools/2006/06/23/gnupg-pgp/ Secure2S Security Tool Sets Blog Sun, 12 Oct 2008 23:48:55 +0000 http://wordpress.org/?v=2.1.2 http://secure2s.net/tools/2006/06/23/gnupg-pgp/#comment-2 ha.ckers.org security lab - Archive » MD5 isn’t really broken - sorta Sat, 24 Jun 2006 23:12:36 +0000 http://secure2s.net/tools/2006/06/23/gnupg-pgp/#comment-2 [...] Rainbow crack really is a great tool, but it has one major flaw in it.  It takes a LOT of time to calculate every known hash of every password and worse yet, a lot of space to keep them all organized.  Passwords are generally less than 8 characters, but even still, I’ve seen passwords that can get up to dozens of chars long (like GnuPG or PGP passphrases, for instance).  What about long strings, like cookies?  Cookies are arbitrary things that can be any lenght (well, in reality they must total less than 4k otherwise Internet Explorer can’t deal with them in JavaScript space).  So let’s just use 4k as a hard stop. [...] […] Rainbow crack really is a great tool, but it has one major flaw in it.  It takes a LOT of time to calculate every known hash of every password and worse yet, a lot of space to keep them all organized.  Passwords are generally less than 8 characters, but even still, I’ve seen passwords that can get up to dozens of chars long (like GnuPG or PGP passphrases, for instance).  What about long strings, like cookies?  Cookies are arbitrary things that can be any lenght (well, in reality they must total less than 4k otherwise Internet Explorer can’t deal with them in JavaScript space).  So let’s just use 4k as a hard stop. […]

]]>