Let's imagine there is someone out there able to crack any hash of the entire set of DES-based crypt(3) hashes in a reasonable amount of time, say 5-10 days.
Let's imagine that no matter how many hashes are submitted to the system, 1 or 1000, all of them are guaranteed to be cracked in this constant amount of time. Let's also imagine this service becomes commercially available. Even though DES-based crypt(3) is outdated and obsolete, its use is still widespread in typical large heterogeneous IT environments. So I guess this service would interest lots of legitimate clients such as pentesters, government agencies, IT departments in large companies or universities, and the likes. How much would you value this service ? Would you pay $100, $10, $1 per hash to crack ? Would you require anonymity to use the service ? -XRR _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/