View Single Post
  #2  
Old 07-01-2004, 13:28
tbone
 
Posts: n/a
I've heard of people using this approach before for NTLM password hashes - usually they can store all the precalculated hashes on a CD. Precaluclation isn't all that new of an idea in the codebreaking world, but the fact that it can be done so easily on NTLM underscores how weak that system is. This type of attack is only useful because of the small keyspace for NTLM. NTLMv2 increased it to 128 bits, which still isn't really strong encryption by most modern standards, but it at least ups the ante when it comes to how much space it takes to store precalculated hashes.

At some point this approach becomes downright impossible. RSA is a great example. There's a powerpoint lecture on this at hxxp://www.cs.uno.edu/~golden/4621sl2/4621sl2.ppt, but powerpoint slides piss me off. Feel free to use google's HTML translation of it instead. To paraphrase:

Assuming you even had the computing power to precaluclate the factors of all 200 digit numbers, you would need approximately (9 * 10^200) * 665 bits to store them all. If you had some kind of medium that could store 100GB of data in one millionth of a gram, you would have 6.75 * 10^177 tons of storage. The Chandrasekhar limit is approximately 10^27 tons. Ergo your precalculated tables would collapse into a black hole long before you got the chance to use them

Edit: Crikey, my spelling and typing goes to hell after midnight!

Last edited by tbone; 07-01-2004 at 13:31.
Reply With Quote