221–230 of 263 posts
Earlier quoted context omitted.
That sounds like Bitcoin with extra steps Jokes aside, that would actually be fun if the password is actually reasonably guess-able, I would definitely give it a try if that existed
Oh no, now someone will make wordlecoin, where you have to work with others sharing hints to mine each block.
Earlier quoted context omitted.
so the puzzle author could "cheat" and just present a 256-bit number and not know the preimage at all, which would be a fun shortcut.
Huh, I realize I don’t know the answer to this seemingly simple question. Are all 256 bit vectors valid sha-256 hashes?
In a secure hash function, all output bits are without bias. So all combinations exist.
Earlier quoted context omitted.
How does the first guess "peel off" 14 bits of entropy?
The digest is 64 characters long, so on average you should get 4 positions where your guess and the digest are the same, which would narrow it down to (1/16)*4 of the possibilities, corresponding to "peeling off" 16 bits of entropy. Figuring out how to enumerate only those values which generate a hex digest that matches the known characters in the hash is left as an exercise for the reader.
There is like... four people I know I could send this to who'd laugh, it's so niche. Yet I also laughed out loud when I got how conventionally impossible it is.
https://www.schneierfacts.com/
(Sorry for the very HN:ish post, but I feel it's somewhat in the spirit of this story)
Earlier quoted context omitted.
You get a SHA256 hash of each guess. The hints you get on each guess are useless to help you with the next guess.
Nope. Try yourself with a, b, c, d, e, f, g as guesses. You will see that green letters that are coincident will be the same. So to reconstruct the original SHA256 of the password is easy. The problem then turns like every other hash -> password reconstruction: hard if the original secret is hard to guess via dictionary/brute-force, otherwise easy.
I'm not sure that really helps you much though, as you don't have enough guesses to get the entire hash. And even with that, you may or may not succeed.
Still, good point!
Earlier quoted context omitted.
Nope. Try yourself with a, b, c, d, e, f, g as guesses. You will see that green letters that are coincident will be the same. So to reconstruct the original SHA256 of the password is easy. The problem then turns like every other hash -> password reconstruction: hard if the original secret is hard to guess via dictionary/brute-force, otherwise easy.
Ah, I misunderstood the point you were making. It's still true that each hash won't help you make the next password guess, but you can iteratively fill in parts of the overall hash. I'm not sure that really helps you much though, as you don't have enough guesses to get the entire hash. And even with that, you may or may not succeed. Still, good point!
Earlier quoted context omitted.
Huh, I realize I don’t know the answer to this seemingly simple question. Are all 256 bit vectors valid sha-256 hashes?
Yes. In a secure hash function, all output bits are without bias. So all combinations exist.
Earlier quoted context omitted.
I wish it accepted a given password from a url query parameter, so this url would work: https://rsk0315.github.io/playground/passwordle.html?passwor... Or the way bikeshed.com lets you configure the color with the domain name, like: https://bisque.bikeshed.com/ Then they could monetize it by selling gullible suckers NFTs of urls pointing to Passwordle games of their passwords.
Even better would be to link to the hash of the password, then there would be no way to guess.
Earlier quoted context omitted.
If you can casually write an algorithm to break a modern cryptographic hash in 10 guesses... I would like to know. Because then I have to decide if I want to be a very good friend of you, once you get rich, or if I want to stay as far away from you as possible once the state intelligence agencies come after you.
It's not a cryptographic break. It's simply a regular password cracking algorithm, but with instead of knowing the full hash, you only know a partial hash. It should be viable, even without rainbow tables. That's why plain, unsalted sha256 is very unsafe for password storage.