I am aware that this is caused by a CRC32 hash collision. This seems to happen in cases where there are many 00's at the end of small data, such as firmware data.
Since this case occurred before with data that could not be shared publicly, I created the data and verified it.
Version: Hashcat v6.2.6
Archive: https://www.mediafire.com/file/5krqfblscub98tn/Test.rar/file
Correct password: 'foo bar baz qux quux corge grault garply waldo fred plugh xyzzy thud'
Reported password: 'vHoED'
[link] [comments]
from hacking: security in practice https://ift.tt/b2m7YwF
Comments
Post a Comment