Skip to content

Latest commit

 

History

History
69 lines (52 loc) · 3.47 KB

README.md

File metadata and controls

69 lines (52 loc) · 3.47 KB
Raw

PBKDF2 bulk computation utilities

A C++11 library for brute-forcing PBKDF2 using (not only) massive parallel processing on GPU hardware and a tool for brute-forcing LUKS passwords.

This project is part of my bachelor's thesis on the Faculty of Informatics, Masaryk University.

Building

Prerequisites

  • The OpenSSL/LibreSSL crypto library. Note: LibreSSL is significantly faster for PBKDF2 computation on the CPU.
  • An OpenCL library version 1.1 or higher (you should have libOpenCL.so or libOpenCL.so.1 somewhere in your library search path).

Using GNU autotools

$ autoreconf -i
$ mkdir build && cd build
$ ../configure --disable-shared && make

Using qmake

The project also ships with qmake project files so you can build it using qmake or open it in the QtCreator IDE (just load the pbkdf2-gpu.pro file).

Building from terminal using qmake:

$ mkdir build-qmake && cd build-qmake
$ qmake ../pbkdf2-gpu.pro && make

Subprojects

  • libhashspec-openssl – A utility library to lookup an OpenSSL hash algorithm (a pointer to EVP_MD structure) from a LUKS hashspec string (see the LUKS On-Disk Format Specification for more information).
  • libhashspec-hashalgorithm – A utility library to lookup a hash algorithm implementation based on a LUKS hashspec string (see above).
  • libcipherspec-cipheralgorithm – A utility library to lookup a cipher algorithm implementation based on LUKS cipherspec and ciphermode strings (see above).
  • libivmode – A utility library to lookup an IV generator implementation based on a LUKS ivmode string (see above).
  • libpbkdf2-compute-cpu – A reference implementation of the libpbkdf2-compute interface (see below) performing computation on the CPU.
  • libpbkdf2-compute-opencl – An implementation of the libpbkdf2-compute interface (see below) performing computation on one or more OpenCL devices.
  • libcommandline – A simple command-line argument parser.
  • pbkdf2-compute-tests – A utility that runs tests (currently only checks computation of RFC test vectors) on the libpbkdf2-compute-* libraries.
  • benchmarking-tool – A command-line tool for benchmarking the performance of the libpbkdf2-compute-* libraries.
  • lukscrack-gpu – A command-line tool for cracking passwords of LUKS disk partitions.

Supported algorithms

Hash functions

All hash functions specified in the LUKS On-Disk Format Specification are supported:

  • SHA-1 (sha1)
  • SHA-256 (sha256)
  • SHA-512 (sha512)
  • RIPEMD-160 (ripemd160)

Cipher algorithms and modes

  • AES-128 (aes) -- ECB, CBC, XTS
  • AES-192 (aes) -- ECB, CBC, XTS
  • AES-256 (aes) -- ECB, CBC, XTS
  • CAST-128 (cast5) -- ECB, CBC

TwoFish (twofish), Serpent (serpent) and CAST-256 (cast6) are not supported.

IV generators

  • (none) - if IV mode is not specified (only for ECB mode)
  • null
  • plain
  • plain64
  • essiv:<hash> where <hash> is one of the hash functions listed above.

The common interface of libpbkdf2-compute-* libraries

TODO