Skip to content

Comment on Bruteforcing the Devil

Comments

I came up with a mutation-based solution to this. Supply any string and it finds a valid hash in as few edits as possible.

Example: http://bochs.info/img/mutation-20140606-024906.png

One could definitely optimize this to be less destructive and produce more pronounceable results. It's basically two pieces: an engine for suggesting mutations, and a simple algorithm to score and pick mutations. Changes to either half (vowel distribution, ngrams, etc) could result in better strings.

(fyi, this kind of attack is a big reason to use cryptographic hashes: http://en.wikipedia.org/wiki/Cryptographic_hash_function)

When Pfiffer told me peh would post that on HN, my reaction was something like "Fine by me, but I'm pretty sure I'm going to get schooled." Looks like I was right.

I got schooled, I'm learning, next time I'll be more clever about it, thank you!

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.