%0 Conference Proceedings
%T Performance of Password Guessing Enumerators Under Cracking Conditions
%+ Equipe SAFE - Laboratoire GREYC - UMR6072
%A Valois, Mathieu
%A Lacharme, Patrick
%A Le Bars, Jean-Marie
%Z Région Normandie
%Z Part 2: Access Control
%< avec comité de lecture
%( IFIP Advances in Information and Communication Technology
%B ICT Systems Security and Privacy Protection - IFIP SEC
%C Lisbonne, Portugal
%Y Gurpreet Dhillon
%Y Fredrik Karlsson
%Y Karin Hedström
%Y André Zúquete
%I Springer International Publishing
%3 ICT Systems Security and Privacy Protection
%V 562
%P 67-80
%8 2019-06-25
%D 2019
%R 10.1007/978-3-030-22312-0_5
%K Password, Hash function, Cracking conditions
%K Password, Hash function, Cracking conditions
%Z ICT
%Z Computer Science [cs]/Cryptography and Security [cs.CR]Conference papers
%X In this work, we aim to measure the impact of hash functions on the password cracking process. This brings us to measure the performance of password enumerators, how many passwords they find in a given period of time. We propose a performance measurement methodology for enumerators, which integrates the success rate and the speed of the whole password cracking process. This performance measurement required us to develop advanced techniques to solve measurement challenges that were not mentioned before. The experiments we conduct show that software-optimized enumerators like John The Ripper-Markov and the bruteforce perform well when attacking fast hash functions like SHA-1. Whereas enumerators like OMEN and PCFG-based algorithm perform the best when attacking slow hash functions like bcrypt or Ar-gon2. Using this approach, we realize a more in-depth measurement of the enumerators performance, considering quantitatively the trade-off between the enumerator choice and the speed of the hash function. We conclude that software-optimized enumerators and tools must implement academic methods in the future.
%G English
%Z TC 11
%2 https://hal.science/hal-02060091/document
%2 https://hal.science/hal-02060091/file/ifipsec.pdf
%L hal-02060091
%U https://hal.science/hal-02060091
%~ CNRS
%~ GREYC
%~ GREYC-MONEBIOM
%~ IFIP
%~ IFIP-AICT
%~ COMUE-NORMANDIE
%~ IFIP-TC
%~ IFIP-TC11
%~ IFIP-SEC
%~ ENSICAEN
%~ UNICAEN
%~ IFIP-AICT-562