nerdexam
GIAC

GSEC · Question #11

Which of the following is a benefit of using John the Ripper for auditing passwords?

The correct answer is C. John's MD5 cracking routine uses a simplified central computing loop that decreases the cost of. John the Ripper optimizes its MD5 cracking routine by using a simplified central computing loop, reducing per-hash computation cost and increasing overall throughput during password audits.

Exploitation & Post-Exploitation Techniques

Question

Which of the following is a benefit of using John the Ripper for auditing passwords?

Options

  • AJohn's Blowfish cracking routine uses a complex central computing loop that increases the cost of
  • BJohn the Ripper is much slower for auditing passwords encrypted with MD5 and Blowfish.
  • CJohn's MD5 cracking routine uses a simplified central computing loop that decreases the cost of
  • DJohn cannot use the DES bit-slicing technique, so it is much slower than other tools, especially

How the community answered

(52 responses)
  • A
    17% (9)
  • B
    8% (4)
  • C
    71% (37)
  • D
    4% (2)

Why each option

John the Ripper optimizes its MD5 cracking routine by using a simplified central computing loop, reducing per-hash computation cost and increasing overall throughput during password audits.

AJohn's Blowfish cracking routine uses a complex central computing loop that increases the cost of

Increasing the cost of Blowfish computation would make cracking slower, which is a disadvantage for auditing, not a benefit - and Blowfish's high cost is intentional for storage security, not a John the Ripper optimization.

BJohn the Ripper is much slower for auditing passwords encrypted with MD5 and Blowfish.

John the Ripper is specifically noted for being faster at MD5 and other hash types due to its optimized routines, not slower.

CJohn's MD5 cracking routine uses a simplified central computing loop that decreases the cost ofCorrect

John the Ripper's MD5 implementation uses a simplified inner loop that reduces the number of operations required per hash computation, directly lowering the cost per candidate password tested. This optimization makes auditing MD5-hashed passwords faster compared to generic implementations. The result is higher cracking throughput, which is a core benefit for password auditing purposes.

DJohn cannot use the DES bit-slicing technique, so it is much slower than other tools, especially

John the Ripper does support DES bit-slicing, which is one of its performance advantages that makes it faster than tools lacking this technique.

Concept tested: John the Ripper MD5 optimization for password auditing

Topics

#John the Ripper#password cracking#MD5#password auditing

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full GSEC Practice