Given powerful GPU and PC hardware, is it realistic to recover a password in a few hours given a cleartext's MD5? Max chars are 95, and the maximum length of the password is 15 characters.
$\begingroup$
$\endgroup$
4
-
2$\begingroup$ Well, what's $log_2(95^{15})$? That's your maximum strength in bits (i.e. computer generated) password. It would be near 100 bits, that's well outside of any single PC, and likely even outside any computer configuration. I don't think that rainbow tables would help either. $\endgroup$– Maarten Bodewes ♦Jul 11, 2021 at 12:34
-
1$\begingroup$ But what about using GPU ? $\endgroup$– prtqwsqJul 11, 2021 at 14:19
-
$\begingroup$ Start calculating by using these. How reassuring is 64-bit (in)security?. Why do you care MD5! $\endgroup$– kelalakaJul 11, 2021 at 16:10
-
$\begingroup$ You don't need to go nearly that large. Per Terahash a 13 (random) character password hashed with MD-5 would take over 300 years to brute force (using a fairly modern GPU). Keep in mind that's a random password, human selected passwords can sometimes be brute forced using password topologies within days or even hours. $\endgroup$– SwashbucklerJul 12, 2021 at 0:06
Add a comment
|