Skip to content

Add age hash format and age2john utility#6014

Open
AlbertVeli wants to merge 1 commit into
openwall:bleeding-jumbofrom
AlbertVeli:age-format
Open

Add age hash format and age2john utility#6014
AlbertVeli wants to merge 1 commit into
openwall:bleeding-jumbofrom
AlbertVeli:age-format

Conversation

@AlbertVeli

Copy link
Copy Markdown
Contributor

Support cracking age (https://age-encryption.org/) passphrase-encrypted files (scrypt + ChaCha20-Poly1305) and extracting hashes with age2john.py

Skips non-scrypt recipients (X25519, SSH, plugins), age2john.py is compatible with python2.7 and python3.

@solardiz solardiz left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you. I made some comments, including changes that really need to be made and a few that are optional. When making changes, please amend the commit and force-push - don't add more commits. We'll also need a doc/NEWS entry for this, but we have those in other pending PRs, so maybe unwise to add it yet or we'd have merge conflicts.

Comment thread run/age2john.py Outdated
Comment thread src/age_fmt_plug.c
Comment thread src/age_fmt_plug.c Outdated
Comment thread src/age_fmt_plug.c
Comment thread src/age_fmt_plug.c Outdated
Comment thread src/age_fmt_plug.c Outdated
Comment thread src/age_fmt_plug.c Outdated
@AlbertVeli

Copy link
Copy Markdown
Contributor Author

Thanks for the review. I've amended the commit and force pushed. Now I'm a bit scared. I hope it's correct. I'll add samples to the john-samples repo if this pull request looks ok to the reviewer(s).

@AlbertVeli

Copy link
Copy Markdown
Contributor Author

In the latest force push I changed the password for the second fmt_test vector to password123 to match the samples in openwall/john-samples#48

Both passwords are in the default john wordlist password.lst.

Support cracking age (https://age-encryption.org/)
passphrase-encrypted files (scrypt + ChaCha20-Poly1305)
and extracting hashes with age2john.py

Skips non-scrypt recipients (X25519, SSH, plugins).
age2john.py is compatible with python2.7 and python3.
@AlbertVeli

Copy link
Copy Markdown
Contributor Author

I changed the second test vector to be exactly the same as in the john-samples repository. All comments are now addressed as far as I can see.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants