Given powerful GPU and PC hardware, is it realistic to recover a password in a few hours given a cleartext's MD5? Max chars are 95, and the maximum length of the password is 15 characters.

  • 2
    $\begingroup$ Well, what's $log_2(95^{15})$? That's your maximum strength in bits (i.e. computer generated) password. It would be near 100 bits, that's well outside of any single PC, and likely even outside any computer configuration. I don't think that rainbow tables would help either. $\endgroup$
    – Maarten Bodewes
    Jul 11, 2021 at 12:34
  • 1
    $\begingroup$ But what about using GPU ? $\endgroup$
    – prtqwsq
    Jul 11, 2021 at 14:19
  • $\begingroup$ Start calculating by using these. How reassuring is 64-bit (in)security?. Why do you care MD5! $\endgroup$
    – kelalaka
    Jul 11, 2021 at 16:10
  • $\begingroup$ You don't need to go nearly that large. Per Terahash a 13 (random) character password hashed with MD-5 would take over 300 years to brute force (using a fairly modern GPU). Keep in mind that's a random password, human selected passwords can sometimes be brute forced using password topologies within days or even hours. $\endgroup$ Jul 12, 2021 at 0:06


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.