Professional Documents
Culture Documents
##
## Features
##
- Added option --benchmark-all to benchmark all hash-modes (not just the default
selection)
- Removed option --gpu-temp-retain that tried to retain GPU temperature at X
degrees celsius - please use driver-specific tools
- Removed option --powertune-enable to enable power tuning - please use driver
specific tools
##
## Algorithms
##
##
## Bugs
##
- Fixed a configuration setting for -m 400 in pure kernel mode which said it was
capable of doing SIMD when it is not
- Fixed a hash parsing problem for 7-Zip hashes: allow a longer CRC32 data length
field within the hash format
- Fixed a hash parsing problem when using --show/--left with hashes with long salts
that required pure kernels
- Fixed a logic error in storing temporary progress for slow hashes, leading to
invalid speeds in status view
- Fixed a mask-length check issue: return -1 in case the mask length is not within
the password-length range
- Fixed a missing check for return code in case hashcat.hcstat2 was not found
- Fixed a race condition in combinator- and hybrid-mode where the same scratch
buffer was used by multiple threads
- Fixed a restore issue leading to "Restore value is greater than keyspace" when
mask files or wordlist folders were used
- Fixed a uninitialized value in OpenCL kernels 9720, 9820 and 10420 leading to
absurd benchmark performance
- Fixed the maximum password length check in password-reassembling function
- Fixed the output of --show when $HEX[] passwords were present within the potfile
##
## Improvements
##
- OpenCL Kernels: Add a decompressing kernel and a compressing host code in order
to reduce PCIe transfer time
- OpenCL Kernels: Improve performance preview accuracy in --benchmark, --speed-only
and --progress-only mode
- OpenCL Kernels: Remove password length restriction of 16 for Cisco-PIX and Cisco-
ASA hashes
- Terminal: Display set cost/rounds during benchmarking
- Terminal: Show [r]esume in prompt only in pause mode, and show [p]ause in prompt
only in resume mode
##
## Technical
##
- Autotune: Improve autotune engine logic and synchronize results on same OpenCL
devices
- Documents: Added docs/limits.txt
- Files: Copy include/ folder and its content when SHARED is set to 1 in Makefile
- Files: Switched back to relative current working directory on windows to work
around problems with Unicode characters
- Hashcat Context: Fixed a memory leak in shutdown phase
- Hash Parser: Changed the way large strings are handled/truncated within the event
buffer if they are too large to fit
- Hash Parser: Fixed a memory leak in shutdown phase
- Hash Parser: Fixed the use of strtok_r () calls
- OpenCL Devices: Fixed several memory leaks in shutdown phase
- OpenCL Kernels: Add general function declaration keyword (inline) and some OpenCL
runtime specific exceptions for NV and CPU devices
- OpenCL Kernels: Replace variables from uXX to uXXa if used in __constant space
- OpenCL Kernels: Use a special kernel to initialize the password buffer used
during autotune measurements, to reduce startup time
- OpenCL Kernels: Refactored kernel thread management from native to maximum per
kernel
- OpenCL Kernels: Use three separate comparison kernels (depending on keyver) for
WPA instead of one
- OpenCL Runtime: Add current timestamp to OpenCL kernel source in order to force
OpenCL JiT compiler to recompile and not use the cache
- OpenCL Runtime: Enforce use of OpenCL version 1.2 to restrain OpenCL runtimes to
make use of the __generic address space qualifier
- OpenCL Runtime: Updated rocm detection
- Returncode: Enforce return code 0 when the user selects --speed-only or
--progress-only and no other error occurs
- Rules: Fixed some default rule-files after changing rule meaning of 'x' to 'O'
- Self Test: Skip self-test for mode 8900 - user-configurable scrypt settings are
incompatible with fixed settings in the self-test hash
- Self Test: Skip self-test for mode 15700 because the settings are too high and
cause startup times that are too long
- Terminal: Add workitem settings to status display (can be handy for debugging)
- Terminal: Send clear-line code to the same output stream as the message
immediately following
- Timer: Switch from gettimeofday() to clock_gettime() to work around problems on
cygwin
- User Options: According to getopts manpage, the last element of the option array
has to be filled with zeros
##
## Improvements
##
- Changed the maximum length of the substring of a hash shown whenever the parser
found a problem while parsing the hash
##
## Bugs
##
##
## Features
##
##
## Algorithms
##
##
## Bugs
##
##
## Improvements
##
- Autotune: Do a pre-autotune test run to find out if kernel runtime is above some
TDR limit
- Charset: Add additional DES charsets with corrected parity
- OpenCL Buffers: Do not allocate memory for amplifiers for fast hashes, it's
simply not needed
- OpenCL Kernels: Improved performance of SHA-3 Kernel (keccak) by hardcoding the
0x80 stopbit
- OpenCL Kernels: Improved rule engine performance by 6% on for NVidia
- OpenCL Kernels: Move from ld.global.v4.u32 to ld.const.v4.u32 in _a3 kernels
- OpenCL Kernels: Replace bitwise swaps with rotate() versions for AMD
- OpenCL Kernels: Rewritten Keccak kernel to run fully on registers and partially
reversed last round
- OpenCL Kernels: Rewritten SIP kernel from scratch
- OpenCL Kernels: Thread-count is set to hardware native count except if -w 4 is
used then OpenCL maximum is used
- OpenCL Kernels: Updated default scrypt TMTO to be ideal for latest NVidia and AMD
top models
- OpenCL Kernels: Vectorized tons of slow kernels to improve CPU cracking speed
- OpenCL Runtime: Improved detection for AMD and NV devices on macOS
- OpenCL Runtime: Improved performance on Intel MIC devices (Xeon PHI) on runtime
level (300MH/s to 2000MH/s)
- OpenCL Runtime: Updated AMD ROCm driver version check, warn if version < 1.1
- Show cracks: Improved the performance of --show/--left if used together with
--username
- Startup: Add visual indicator of active options when benchmarking
- Startup: Check and abort session if outfile and wordlist point to the same file
- Startup: Show some attack-specific optimizer constraints on start, eg: minimum
and maximum support password- and salt-length
- WPA cracking: Improved nonce-error-corrections mode to use a both positive and
negative corrections
##
## Technical
##
- General: Update C standard from c99 to gnu99
- Hash Parser: Improved salt-length checks for generic hash modes
- HCdict File: Renamed file from hashcat.hcdict to hashcat.hcdict2 and add header
because versions are incompatible
- HCstat File: Add code to read LZMA compressed hashcat.hcstat2
- HCstat File: Add hcstat2 support to enable masks of length up to 256, also adds a
filetype header
- HCstat File: Renamed file from hashcat.hcstat to hashcat.hcstat2 and add header
because versions are incompatible
- HCtune File: Remove apple related GPU entries to workaround Trap 6 error
- OpenCL Kernels: Added code generator for most of the switch_* functions and
replaced existing code
- OpenCL Kernels: Declared all include functions as static to reduce binary kernel
cache size
- OpenCL Kernels: On AMD GPU, optimized kernels for use with AMD ROCm driver
- OpenCL Kernels: Removed some include functions that are no longer needed to
reduce compile time
- OpenCL Runtime: Fall back to 64 threads default (from 256) on AMD GPU to prevent
creating too many workitems
- OpenCL Runtime: Forcing OpenCL 1.2 no longer needed. Option removed from build
options
- OpenCL Runtime: On AMD GPU, recommend AMD ROCm driver for Linux
- Restore: Fixed the version number used in the restore file header
- Time: added new type for time measurements hc_time_t and related functions to
force the use of 64 bit times
##
## Algorithms
##
##
## Features
##
- 7-Zip cracking: increased max. data length to 320k and removed AES padding attack
to avoid false negatives
- Dictionary cache: Show time spent on dictionary cache building at startup
- Rules: Support added for position 'p' (Nth instance of a character) in host mode
(using -j or -k)
- Rules: Support added for rejection rule '_N' (reject plains of length not equal
to N) in host mode
- Rules: Support added for rule 'eX'
- Wordlist encoding: Added parameters --encoding-from and --encoding-to to
configure wordlist encoding handling
- Wordlist encoding: Support added for internal conversion between user-defined
encodings during runtime
##
## Workarounds
##
##
## Improvements
##
##
## Bugs
##
- Fixed a condition that caused hybrid attacks using a maskfile to not select all
wordlists from a wordlist folder
- Fixed a memory leak that was present when a user periodically prints hashcat
status (using --status-timer)
- Fixed a missing type specifier in a function declaration of the RACF kernel
##
## Technical
##
- Building: In the binary release packages, link libiconv static for Windows
binaries
- Dictstat: Structure for dictstat file changed to include --encoding-from and
--encoding-to parameters
- OpenCL Runtime: Updated AMDGPU-PRO driver version check, warn if version 17.10
(known to be broken) is detected
- WPA cracking: Reduced --nonce-error-corrections default from 16 to 8 to
compensate for speed drop caused by big-endian fixes
##
## Features
##
- WPA cracking: Added support for WPA/WPA2 handshake AP nonce automatic error
correction
- WPA cracking: Added parameter --nonce-error-corrections to configure range of
error correction
##
## Algorithms
##
##
## Improvements
##
##
## Bugs
##
- Fixed a hash validation error when trying to load Android FDE < 4.3 hashes
- Fixed a problem where --keyspace combined with custom charsets incorrectly
displayed an error message
- Fixed a problem where --stdout combined with custom charsets incorrectly
displayed an error message
- Fixed a problem with parsing and displaying -m 7000 = Fortigate (FortiOS) hashes
- Fixed a race condition after sessions finish, where the input-base was freed but
accessed afterwards
- Fixed a typo that resulted in the minimum password length not being correctly
initialized
- Fixed --outfile-format formats 11 through 15 to show the correct crack position
- Fixed --remove to apply even when all hashes are either found in the potfile or
detected in weak-hash checks
##
## Technical
##
##
## Features
##
##
## Workarounds
##
- Workaround added for AMDGPU-Pro OpenCL runtime: AES encrypt and decrypt Invertkey
function was calculated wrong in certain cases
- Workaround added for AMDGPU-Pro OpenCL runtime: RAR3 kernel require a volatile
variable to work correctly
- Workaround added for Apple OpenCL runtime: bcrypt kernel requires a volatile
variable because of a compiler optimization bug
- Workaround added for Apple OpenCL runtime: LUKS kernel requires some volatile
variables because of a compiler optimization bug
- Workaround added for Apple OpenCL runtime: TrueCrypt kernel requires some
volatile variables because of a compiler optimization bug
- Workaround added for NVidia OpenCL runtime: RACF kernel requires EBCDIC lookup to
be done on shared memory
##
## Bugs
##
- Fixed a problem within the Kerberos 5 TGS-REP (-m 13100) hash parser
- Fixed clEnqueueNDRangeKernel(): CL_UNKNOWN_ERROR caused by an invalid work-item
count during weak-hash-check
- Fixed cracking of PeopleSoft Token (-m 13500) if salt length + password length is
>= 128 byte
- Fixed cracking of Plaintext (-m 99999) in case MD4 was used in a previous session
- Fixed DEScrypt cracking in BF mode in case the hashlist contains more than 16
times the same salt
- Fixed duplicate detection for WPA handshakes with the same ESSID
- Fixed nvapi datatype definition for NvS32 and NvU32
- Fixed overflow in bcrypt kernel in expand_key() function
- Fixed pointer to local variable outside scope in case -j or -k is used
- Fixed pointer to local variable outside scope in case --markov-hcstat is not used
- Fixed recursion in loopback handling when session was aborted by the user
- Fixed rule 'O' (RULE_OP_MANGLE_OMIT) in host mode in case the offset + length
parameter equals the length of the input word
- Fixed rule 'i' (RULE_OP_MANGLE_INSERT) in host mode in case the offset parameter
equals the length of the input word
- Fixed string not null terminated inside workaround for checking drm driver path
- Fixed string not null terminated while reading maskfiles
- Fixed truncation of password after position 32 with the combinator attack
- Fixed use of option --keyspace in combination with -m 2500 (WPA)
- Fixed WPA/WPA2 cracking in case eapol frame is >= 248 byte
##
## Technical
##
##
## Features
##
- Files: Use $HEX[...] in case the password includes the separater character,
increases potfile reading performance
- Files: If the user specifies a folder to scan for wordlists instead of directly a
wordlist, then ignore the hidden files
- Loopback: Include passwords for removed hashes present in the potfile to next
loopback iteration
- New option --progress-only: Quickly provides ideal progress step size and time to
process on the user hashes and selected options, then quit
- Status screen: Reenabled automatic status screen display in case of stdin used
- Truecrypt/Veracrypt: Use CRC32 to verify headers instead of fuzzy logic, greatly
reduces false positives from 18:2^48 to 3:2^64
- WPA cracking: Reuse PBKDF2 intermediate keys if duplicate essid is detected
##
## Algorithms
##
##
## Bugs
##
- Fixed buffer overflow in status screen display in case of long non-utf8 string
- Fixed buffer overflow in plaintext parsing code: Leading to segfault
- Fixed custom char parsing code in maskfiles in --increment mode: Custom charset
wasn't used
- Fixed display screen to show input queue when using custom charset or rules
- Fixed double fclose() using AMDGPU-Pro on sysfs compatible platform: Leading to
segfault
- Fixed hash-mode 11400 = SIP digest authentication (MD5): Cracking of hashes which
did not include *auth* or *auth-int* was broken
- Fixed hex output of plaintext in case --outfile-format 4, 5, 6 or 7 was used
- Fixed infinite loop when using --loopback in case all hashes have been cracked
- Fixed kernel loops in --increment mode leading to slower performance
- Fixed mask length check in hybrid attack-modes: Do not include hash-mode
dependant mask length checks
- Fixed parsing of hashes in case the last line did not include a linefeed
character
- Fixed potfile loading to accept blank passwords
- Fixed runtime limit: No longer required so sample startup time after
refactorization
##
## Workarounds
##
- Workaround added for Intel OpenCL runtime: GPU support is broken, skip the device
unless user forces to enable it
##
## Technical
##
##
## Features
##
- New option --speed-only: Quickly provides cracking speed per device based on the
user hashes and selected options, then quit
- New option --keep-guessing: Continue cracking hashes even after they have been
cracked (to find collisions)
- New option --restore-file-path: Manually override the path to the restore file
(useful if we want all session files in the same folder)
- New option --opencl-info: Show details about OpenCL compatible devices like an
embedded clinfo tool (useful for bug reports)
- Documents: Added colors for warnings (yellow) and errors (red) instead of
WARNING: and ERROR: prefix
- Documents: Added hints presented to the user about optimizing performance while
hashcat is running
- Hardware management: Support --gpu-temp-retain for AMDGPU-Pro driver
- Hardware management: Support --powertune-enable for AMDGPU-Pro driver
- Password candidates: Allow words of length > 31 in wordlists for -a 0 for some
slow hashes if no rules are in use
- Password candidates: Do not use $HEX[] if the password candidate is a valid UTF-8
string and print out as-is
- Pause mode: Allow quit program also if in pause mode
- Pause mode: Ignore runtime limit in pause mode
- Status view: Show core-clock, memory-clock and execution time in benchmark-mode
in case --machine-readable is activated
- Status view: Show temperature, coreclock, memoryclock, fanspeed and pci-lanes for
devices using AMDGPU-Pro driver
- Status view: Show the current first and last password candidate test queued for
execution per device (as in JtR)
- Status view: Show the current position in the queue for both base and modifier
(Example: Wordlist 2/5)
- Markov statistics: Update hashcat.hcstat which is used as reference whenever the
user defines a mask
- Charsets: Added lowercase ascii hex (?h) and uppercase ascii hex (?H) as
predefined charsets
##
## Algorithms
##
##
## Bugs
##
- Custom charset from file parsing code did not return an error if an error occured
- Fix some clSetKernelArg() size error that caused slow modes to not work anymore
in -a 1 mode
- Hash-mode 11600 = (7-Zip): Depending on input hash a clEnqueueReadBuffer():
CL_INVALID_VALUE error occured
- Hash-mode 22 = Juniper Netscreen/SSG (ScreenOS): Fix salt length for -m 22 in
benchmark mode
- Hash-Mode 5500 = NetNTLMv1 + ESS: Fix loading of NetNTLMv1 + SSP hash
- Hash-mode 6000 = RipeMD160: Fix typo in array index number
- If cracking a hash-mode using unicode passwords, length check of a mask was not
taking into account
- If cracking a large salted hashlist the wordlist reject code was too slow to
handle it, leading to 0H/s
- Null-pointer dereference in outfile-check shutdown code when using --outfile-
check-dir, leading to segfault
- On startup hashcat tried to access the folder defined in INSTALL_FOLDER, leading
to segfault if that folder was not existing
- Random rules generator code used invalid parameter for memory copy function (M),
leading to use of invalid rule
- Sanity check for --outfile-format was broken if used in combination with --show
or --left
##
## Workarounds
##
- Workaround added for AMDGPU-Pro OpenCL runtime: Failed to compile hash-mode 10700
= PDF 1.7 Level 8
- Workaround added for AMDGPU-Pro OpenCL runtime: Failed to compile hash-mode 1800
= sha512crypt
- Workaround added for NVidia OpenCL runtime: Failed to compile hash-mode 6400 =
AIX {ssha256}
- Workaround added for NVidia OpenCL runtime: Failed to compile hash-mode 6800 =
Lastpass + Lastpass sniffed
- Workaround added for macOS OpenCL runtime: Failed to compile hash-mode 10420 =
PDF 1.1 - 1.3 (Acrobat 2 - 4)
- Workaround added for macOS OpenCL runtime: Failed to compile hash-mode 1100 =
Domain Cached Credentials (DCC), MS Cache
- Workaround added for macOS OpenCL runtime: Failed to compile hash-mode 13800 =
Windows 8+ phone PIN/Password
- Workaround added for pocl OpenCL runtime: Failed to compile hash-mode 5800 =
Android PIN
##
## Performance
##
- Improved performance for rule-based attacks for _very_ fast hashes like MD5 and
NTLM by 30% or higher
- Improved performance for DEScrypt on AMD, from 373MH/s to 525MH/s
- Improved performance for raw DES-based algorithms (like LM) on AMD, from 1.6GH/s
to 12.5GH/s
- Improved performance for raw SHA256-based algorithms using meet-in-the-middle
optimization, reduces 7/64 steps
- Improved performance for SAP CODVN B (BCODE) and SAP CODVN F/G (PASSCODE) due to
register handling optimization, gives 3% and 25%
- Improved performance by reducing maximum number of allowed function calls per
rule from 255 to 31
- Improved performance by update the selection when to use #pragma unroll depending
on OpenCL runtime vendor
##
## Technical
##
- Autotune: Do not run any caching rounds in autotune in DEBUG mode if -n and -u
are specified
- Bash completion: Removed some v2.01 leftovers in the bash completion
configuration
- Benchmark: Do not control fan speed in benchmark mode
- Benchmark: On macOS, some hash-modes can't compile because of macOS OpenCL
runtime. Skip them and move on to the next
- Building: Added Makefile target "main_shared", a small how-to-use libhashcat
example
- Building: Added many additional compiler warning flags in Makefile to improve
static code error detection
- Building: Added missing includes for FreeBSD
- Building: Added some types for windows only in case _BASETSD_H was not set
- Building: Changed Makefile to strip symbols in the linker instead of the compiler
- Building: Defined NOMINMAX macro to prevent definition min and max macros in
stdlib header files
- Building: Enabled ASLR and DEP for Windows builds
- Building: Fixed almost all errors reported by cppcheck and scan-build
- Building: On macOS, move '-framework OpenCL' from CFLAGS to LDFLAGS
- Building: On macOS, use clang as default compiler
- Building: Support building on Msys2 environment
- Building: Use .gitmodules to simplify the OpenCL header dependency handling
process
- Charsets: Added DES_full.charset
- Data Types: Replaced all integer macros with enumerator types
- Data Types: Replaced all integer variables with true bool variables in case they
are used as a bool
- Data Types: Replaced all string macros with static const char types
- Data Types: Replaced all uint and uint32_t to u32
- Data Types: Replaced atoi() with atoll(). Eliminates sign conversion warnings
- Documents: Added docs/credits.txt
- Documents: Added docs/team.txt
- Documents: Changed rules.txt to match v3.20 limitations
- Error handling (file handling): Fixed a couple of filepointer leaks
- Error handling (format strings): Fixed a few printf() formats, ex: use %u instead
of %d for uint32_t
- Error handling (memory allocation): Removed memory allocation checks, just print
to stderr instead
- Error handling (startup): Added some missing returncode checks to get_exec_path()
- Fanspeed: Check both fanpolicy and fanspeed returncode and disable retain support
if any of them fail
- Fanspeed: Minimum fanspeed for retain support increased to 33%, same as NV uses
as default on windows
- Fanspeed: Reset PID controler settings to what they were initially
- Fanspeed: Set fan speed to default on quit
- File handling: Do a single write test (for files to be written later) directly on
startup
- File locking: Use same locking mechanism in potfile as in outfile
- Hardware management: Fixed calling conventions for ADL, NvAPI and NVML on windows
- Hardware management: Improved checking for successfull load of the NVML API
- Hardware management: In case fanspeed can not be set, disable --gpu-temp-retain
automatically
- Hardware management: In case of initialization error show it only once to the
user on startup
- Hardware management: Refactored all code to return returncode (0 or -1) instead
of data for more easy error handling
- Hardware management: Refactored macros to real functions
- Hardware management: Removed kernel exec timeout detection on NVIDIA, should no
longer occur due to autotune
- Hardware management: Replaced NVML registry functions macros with their ascii
versions (Adds NVML support for XP)
- Hashlist loading: Do not load data from hashfile if hashfile changed during
runtime
- Kernel cache: Fixed checksum building on oversized device version or driver
version strings
- Logging: Improved variable names in hashcat.log
- Loopback: Refactored --loopback support completely, no longer a recursive
function
- Memory management: Fixed some memory leaks on shutdown
- Memory management: Got rid of all global variables
- Memory management: Got rid of local_free() and global_free(), no longer required
- Memory management: Refactored all variables with HCBUFSIZ_LARGE size from stack
to heap, macOS doesn't like that
- OpenCL Headers: Select OpenCL headers tagged for OpenCL 1.2, since we use -cl-
std=CL1.2
- OpenCL Kernels: Added const qualifier to variable declaration of matching global
memory objects
- OpenCL Kernels: Got rid of one global kernel_threads variable
- OpenCL Kernels: Moved OpenCL requirement from v1.1 to v1.2
- OpenCL Kernels: Recognize reqd_work_group_size() values from OpenCL kernels and
use them in the host if possible
- OpenCL Kernels: Refactored common function append_0x01()
- OpenCL Kernels: Refactored common function append_0x02()
- OpenCL Kernels: Refactored common function append_0x80()
- OpenCL Kernels: Refactored rule function append_block1()
- OpenCL Kernels: Refactored rule function rule_op_mangle_delete_last()
- OpenCL Kernels: Refactored rule function rule_op_mangle_dupechar_last()
- OpenCL Kernels: Refactored rule function rule_op_mangle_rotate_left()
- OpenCL Kernels: Refactored rule function rule_op_mangle_rotate_right()
- OpenCL Kernels: Support mixed kernel thread count for mixed kernels in the same
source file
- OpenCL Kernels: Switch from clz() to ffz() for bitsliced algorithms
- OpenCL Kernels: Using platform vendor name is better than using device vendor
name for function detection
- OpenCL Runtime: Updated AMDGPU-Pro and AMD Radeon driver version check
- OpenCL Runtime: Updated Intel OpenCL runtime version check
- OpenCL Runtime: Updated NVIDIA driver version check
- Password candidates: The maximum word length in a wordlist is 31 not 32, because
0x80 will eventually be appended
- Potfile: Base logic switched; Assuming the potfile is larger than the hashlist
it's better to load hashlist instead of potfile entries
- Potfile: In case all hashes were cracking using potfile abort and inform user
- Restore: Automatically unlink restore file if all hashes have been cracked
- Restore: Do not unlink restore file if restore is disabled
- Rules: Refactored macros to real functions
- Status: Added Input.Queue.Base and Input.Queue.Mod to help the user better
understand this concept
- Status: Do not wait for the progress mutex to read and store speed timer
- Status: Do not show Recovered/Time when cracking < 1000 hashes
- Status: Do not show Recovered/Time as floats but as integers to reduce over-
information
- Tests: Removed rules_test/ subproject: Would require total rewrite but not used
in a long time
- Threads: Replaced all calls to getpwuid() with getpwuid_r() to ensure thread
safety
- Threads: Replaced all calls to gmtime() with gmtime_r() to ensure thread safety
- Threads: Replaced all calls to strtok() with strtok_r() to ensure thread safety
- Wordlists: Use larger counter variable to handle larger wordlists (that is > 2^32
words)
- X11: Detect missing coolbits and added some help text for the user how to fix it
##
## Improvements
##
- Added mask display to modes 3, 6, and 7. Allows the user to see the custom
character set used during the run
- Make Linux build POSIX compatible; Also allow it to actually compile on musl-libc
systems
- Add support to compile on FreeBSD
- Make use of cl_context_properties[] to clCreateContext(), even if OpenCL
specification allow the use of NULL, some runtimes fail without
- The Time.Estimated attribute in status display should also show --runtime limit
if user set it
- Fix some strict aliasing rule violation on older compilers
- Fix some variable initializers on older compilers
- Replace DARWIN macro with compiler predefined macro __APPLE__
- Replace LINUX macro with compiler predefined macro __linux__
- Allow the use of enc_id == 0 in hash-mode 10600 and 10700 as it takes no part in
the actual computation
- Get rid of exit() calls in OpenCL wrapper library with the goal to have a better
control which error can be ignored under special circumstances
- Do not error and exit if an OpenCL platform has no devices, just print a warning
and continue with the next platform
- Workaround for OpenCL runtimes which do not accept -I parameter in the OpenCL
kernel build options even if this is an OpenCL standard option
- Workaround for OpenCL runtimes which do accept -I parameter in the OpenCL kernel
build options, but do not allow quotes
- Output cracked hashes on Windows using \r\n and not \n
- Replace RegGetValue() with RegQueryValueEx() to enable Windows XP 32 bit
compatibility
- Slightly increased NVidias rule-processing performance by using generic
instructions instead of byte_perm()
- Add support for @ rule (RULE_OP_MANGLE_PURGECHAR) to use on GPU
- Add support for --outfile (short -o) to be used together with --stdout
- Skip periodic status output whenever --stdout is used together with stdin mode,
but no outfile was specified
- Show error message if --show is used together with --outfile-autohex-disable
(this is currently not supported)
- Show error message if --skip/--limit is used together with mask files or
--increment
- Workaround for NVidia OpenCL runtime bug causing -m 6223 to not crack any hashes
even with the correct password candidate
##
## Bugs
##
- Fixed a bug where CRAM MD5 checked salt length instead of hash length
- Fixed a bug where hashcat is suppressing --machine-readable output in the final
status update
- Fixed a bug where hashcat did not check the return of realpath() and crashes
uncontrolled if the path does not exist
- Fixed a bug where hashcat crashes for accessing deallocated buffer if user spams
"s" shortly before hashcat shuts down
- Fixed a bug where hashcat crashes in case of a scrypt P setting > 1
- Fixed a bug where hashcat did not correctly use the newly cracked plains whenever
--loopback or the induction folder was used
- Fixed a bug where hashcat did not correctly remove hashes of type WPA/WPA2 even
if present in potfile
- Fixed a bug where hashcat reported an invalid password for a zero-length password
in LM
- Fixed a bug where hashcat did not take into account how long it takes to prepare
a session when auto-aborting with --runtime is in use
- Fixed a bug where some kernels used COMPARE_M_SIMD instead of COMPARE_S_SIMD in
singlehash mode
##
## Algorithms
##
This release markes the fusion of "hashcat" and "oclHashcat" into "hashcat".
It combines all features of all hashcat projects in one project.
##
## Features
##
##
## Algorithms
##
##
## Performance
##
##
## Improvements
##
##
## Bugs
##
- Fixed a bug in speed display: In some situation, especially with slow hashes or
lots of salts, it showed a speed of 0H/s
- Fixed a bug in restore handling: user immediately aborting after restart broke
the restore file
- Fixed a bug in line counter: conditional jump or move depends on an uninitialised
value
- Fixed a bug in rule-engine for NVidia devices: code for left- and right-shift
were switched
- Fixed a bug in dive.rule: rules were not updated after the function 'x' was
renamed to 'O'
- Fixed a bug in memory allocation "OpenCL -4 error": used unitialized value in a
special situation
- Fixed a bug in memory handling: heap buffer overflow
- Fixed a bug in memory handling: out of bounds access
- Fixed a bug in implementation of DCC2: forced default iteration count for hashes
to 10240
- Fixed a bug in implementation of WPA/WPA2: MAC and nonce stay one their original
position as in the hccap file
- Fixed a bug in implementation of GOST R 34.11-94: zero length passwords were not
cracked
- Fixed a bug in implementation of BLAKE2-512 kernels: incorrect access of the
esalt buffer
##
## Technical
##