double/triple md5

[exoomer]

Do you shedule to add algorithmes like double or triple md5 [md5(md5(password))/md5(md5(md5(password)))] ? Because your program is great, but this option would be great :)

[Sc00bz]

Just wondering who uses triple MD5?

[exoomer]

I know some guys that are using triple md5 without salt :)

[LordMike]

lol

Anyhow. It will prob. be an option of the salty cracker. Else you can use
the Hashcat 0.31. Which IIRC, can do just that.

[exoomer]

Thx LordMike, that program is ideal :)

//edit: the only disadvantage of this prog. is the speed, in brute force md5 the speed is only abour 13/14M/s, double md5 4M/s, isn't it a bit slow? BarsWF is running 60M/s only on my processor, another 250M/s on the GPU.

[schwarzwaldhacker]

Just wondering who uses triple MD5?

Code: Select all

	if ($_SESSION['konto']==1)
	{
	   $_SESSION['passw']=md5($_SESSION['passw']);
	   $_SESSION['passw']=md5($_SESSION['passw']);
	   $_SESSION['passw']=md5($_SESSION['passw']);
	   $req="select * from benutzer where pseudo='$_SESSION[pseudo]' and passw='$_SESSION[passw]'"

Yes, triple MD5 is used? I guess people using "pure MD5" don't know really what's going on around them?

[Sc00bz]

People that use single, double, triple, or more without a unique salt per hash don't know what is going on around them.

[schwarzwaldhacker]

People that use single, double, triple, or more without a unique salt per hash don't know what is going on around them.

That is correct, of course! I only thought about the Online-MD5-Databases.

[LordMike]

People that use single, double, triple, or more without a unique salt per hash don't know what is going on around them.

Or.. They rely on security by secrecy.