CUDA / Cracking with graphics cards......

[Talkie Toaster]

Recently i have come across work done by nvidea into allowing programmers to access the parallel processing power of modern graphics cards, kinda like pico cards in some ways:

http://www.nvidia.com/object/cuda_what_is.html

And then this software available from a Russian company that utilises it against several common encrypted/password protected files that you might find in a large office enviroment:

http://www.elcomsoft.com/

I'm just wondering if anyone else on the forums is also interested in this branch of research, and if there is a possibility of any of the pico card accelerated programmes (cowpatty comes to mind) also having a CUDA version ported.... my reason, a 'basic' pico card is about $1000, a cool-as-f*ck nvidea card is about a quater that, and you can play games with it!

"honest boss,i need 2 of these 8800 GTS cards to keep on top of security! And maybe a 32in monitor for crysis.... sorry, in case there is a crisis i mean!"

Please feel free to hijack this tread with any interesting CUDA news

TT

[aggtrfrad]

cool...
GPUs become more and more powerful every day, I believe that it was a matter of time till something like this started, but i wasn't expecting that to be done from Nvidia And support for Linux too? ...
oh, and by the way, more and more big companies start embedding Linux into their devices, see Nokia and Motorola

[imported_=Tron=]

ATI does offer developers access to the GPU’s processing power as well, although this goes under a different name than CUDA and has not really received as much recognition.
http://ati.amd.com/technology/stream...ing/index.html
http://ati.amd.com/technology/stream.../sdkdwnld.html

I have also wondered how well GPUs would actually lend themselves to for example bruteforcing. It is evident that they could provide a significant speed boost, but it is not normally as critical that the calculations computed by GPUs are exactly spot on, as opposed to the calculations normally carried out by CPUs. Therefore my main concern would be whether or not GPUs would be as reliable in their calculations as CPUs, since this naturally is key when it comes to password cracking.

[Talkie Toaster]

Tron: I think ATI and nvidea are now working together somewhat and have made their code available to each other and to programmers, i never thought i'd see the two work together but hey-ho!

And well spotted about the potential for 'mistakes' when using GPUs, your absolutely right! As standard a graphics card has no need to error check its output because all it is doing is throwing a massive amount of pixels at the screen every second, even if it gets say 1 in every 100,000 calculations wrong you'd never notice as your playing a game at 45 fps as it would just be the occasional pixel out of place.
If you were generating rainbow tables on the other hand a mistake in 1 out of every 100,000 calculations would probably lead to big problems.....

The way round this seems to be simply better made(ie: more expensive...) graphics cards, the Fire GL series http://ati.amd.com/products/firegl.html used to be 'workstation' grade but there price has taken a nose dive since folding-at-home has become the latest way of system builders to wave their e-penis about.... A few more graphics cards that are 'lossless' or error-checking seem to be in the pipes, but like cpus with unlocked multipliers (intel extreme,phenom black) they will cost more.

Also GPUs are fast and fun, usually with gddr3 or 5 welded to them, but the most interesting part just now seems to be the stream processors(pixilors/shaders whatever) fitted on ati cards, with up to 800 of these on the 4800 series these things AND a tidy gpu to boss them about they seem like the better value choice just now.

In fact i'm sure one of the mods on the forum has 2 of the 4800 series cards, maybe PH or BP, i wonder what they are using them for.....

:edit: ^^ I bet 10 bucks its Call of Duty 4! ^^

TT

[Barry]

I saw some Russian company had a windows password brute force program that was graphics chipset enabled.

[Talkie Toaster]

early morning where you are barry?

"And then this software available from a Russian company that utilises it against several common encrypted/password protected files that you might find in a large office enviroment:

http://www.elcomsoft.com/ "

I've actually just had a better look around their site, it might not be much use for a individual pentester but this would be invaluable for head of IT at a call centre/local authority type place where you have muliple locked file formats flying about and people leaving/being sick/on holiday.

Anyone with professional (or otherwise, it listed on torrent sites but downloading a cracked copy of a cracking programme from a Russian company seemed a little to risky!) experiance of this programme? I'd love to hear how it performs in the real world.

TT

[Barry]

early morning where you are barry?

"And then this software available from a Russian company that utilises it against several common encrypted/password protected files that you might find in a large office enviroment:

http://www.elcomsoft.com/ "

I've actually just had a better look around their site, it might not be much use for a individual pentester but this would be invaluable for head of IT at a call centre/local authority type place where you have muliple locked file formats flying about and people leaving/being sick/on holiday.

Anyone with professional (or otherwise, it listed on torrent sites but downloading a cracked copy of a cracking programme from a Russian company seemed a little to risky!) experiance of this programme? I'd love to hear how it performs in the real world.

TT

Yea, it was... No coffee yet, who the hell does job interviews at 8:45 in the freaking morning???

[shamanvirtuel]

gpu cracking will be one of my next toy as soon as i get a new home ...
i want to play with wpa cracking ....

there's also some wep cracking program that use ps3 chips ...

http://www.802.11mercenary.net/ps3-wepcrack/

[opreat0r]

I been working on http://cracker.rmccurdy.com currrently having issues with the new rcracki binary in freebsd

http://www.freerainbowtables.com/php....php?f=5&t=768

windows app only uses one core(2.8 3meg cache ) but cracks 10 LM passwords in ~300sec

[Re@lity]

The modern day GPU's now do fixed point calculations, whereas previously GPU's only performed floating point calculations....
They also act like multiple processors in the way in which they "split" the data up and process it simultaneously, kind of like "multi cores"

It's been around quite some time now.
Nvidia released a dev kit early last year actually.

In fact, I made a post about this subject some time back, although I can't seem to find it now....it may precede this re-incarnation of the forums?

Anyway, it's surprising to see that after all this time that it's not really taken off much.
I really thought that it would become a massively popular thing!

SV, look forward to seeing your work on it