25-GPU cluster cracks every standard Windows password in less than 6 hours
1–10 of 77 posts
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#2Edited title for length, because original title got truncated in a confusing fashion.
Original title: "25-GPU cluster cracks every standard Windows password in <6 hours"
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#3If this is done with commodity hardware, now, what were the NSA's capabilities even 5 years ago?
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#4Every standard Windows password less than 8 chars only?
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#5If this is done with commodity hardware, now, what were the NSA's capabilities even 5 years ago?
I'm sure they were able to crack the encryption method before Microsoft started using it.
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#6How bout SSL?
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#7If this is done with commodity hardware, now, what were the NSA's capabilities even 5 years ago?
I'm sure they were able to crack the encryption method before Microsoft started using it.
Put your tin foil hats away. This doesn't "crack" NTLM, it brute forces at a very high rate. The NSA has more money to spend, but are similarly limited by the hardware available at any given point.
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#8If this is done with commodity hardware, now, what were the NSA's capabilities even 5 years ago?
For comparison, a couple weeks ago Oak Ridge National Laboratory's Titan computer topped the Top500 list for fastest supercomputer in the world (although that title is a bit misleading). Here's the specs on Titan:
18,688 AMD Opteron 6274 16-core CPUs
18,688 Nvidia Tesla K20 GPUs
17.59 petaflops
Titan displaced Sequoia (at Lawrence Livermore National Laboratory) from the top spot on Top500. Interestingly enough, Sequoia uses a very different architecture, based on 16-core PowerPC A2 nodes rather than GPUs. Sequoia also has about 1.6PB of memory, while Titan "only" has 1PB.
Both computers have reasonably different use cases. GPUs are great for embarrassingly parallel, non-memory intensive tasks like brute forcing passwords. But all of the rumors about the NSA's massive data analysis needs suggests that they may need a cluster that resembles Sequoia (with fewer cores, but larger caches and available memory) more than Titan.
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#9Stupid title. This guy could double his cluster and never hope to crack a single 9 digit password let alone anything longer than that.
Re: 25-GPU cluster cracks every standard Windows password in less than 6 hours
#10Impressive as the numbers are, it's worth remembering that this is an "offline crack", going against a stolen list of encrypted passwords. If they can steal your database of encrypted passwords, you've got a problem no matter how strong the passwords are.
How many guesses per second do you get in a typical online crack? E.g., a script kiddie trying to guess your cloud server's SSH password?