New Password Recovery Technique Uses CPU and GPU Together

[thorin]

About time someone tried this:

http://it.slashdot.org/article.pl?sid=07/10/22/1851226
http://www.net-security.org/secworld.php?id=5567

Using the "brute force" technique of recovering passwords, it was possible, though time-consuming, to recover passwords from popular applications. For example, the logon password for Windows Vista might be an eight-character string composed of uppercase and lowercase alphabetic characters. There would about 55 trillion (52 to the eighth power) possible passwords. Windows Vista uses NTLM hashing by default, so using a modern dual-core PC you could test up to 10,000,000 passwords per second, and perform a complete analysis in about two months. With ElcomSoft's new technology, the process would take only three to five days, depending upon the CPU and GPU.

[-=Xploitz=-]

3-5 days sure beats 2 months any day!!

Still though, you'd really have to need that password pretty badly to wait 3-5 days. Nice advancement in technology. I'll test this out if I can get my hands on this BaCA.

Any news to a release date? Cause I couldn't find one.

Thanks for the update thorin.

[elazar]

Those RSA tokens are looking better and better each day...