FPGA MD5 Cracker - Part 2

For my Digital Systems Laboratory (ECE 385) at the University of Illinois I had to do a final project using a field-programmable gate array (FPGA). My partner and I designed a hardware implementation of the MD5 algorithm and used it to crack MD5 password hashes. A FPGA allows you to prototype large digital circuits by utilizing a hardware description language such as VHDL. The FPGA enabled us to create a large hardware system dedicated to cracking MD5 Passwords. The FPGA we used was the Altera DE2 Development Board with the Cyclone II chip, and we were able to fit sixteen parallel MD5 Cracking units onto the FPGA. Each unit is able to produce a MD5 hash in 68 clock cycles, and since the FPGA has a clock rate of 50 MHz this system is able to produce over 44 million hashes a minute. The MD5 hash is inputted by the user through a keyboard, and if the system finds a match, the clear text password is displayed on a VGA monitor.

Category:

Howto & Style

Tags:

• Md5
• password
• cracking
• hack
• infinity
• exists
• full
• disclosure

[bigboy071]

You could try and pipeline the operations. It would take about as long to get a hash from initial input, but after that, you get one new hash per clock cycle. You could get 50 million hash / sec (3 billion hash per minutes) :-)

[Gregorpm]

That's a great idea. However, the algorithm has 4 phases and each phase is repeated 16 times, so to implement a real pipeline I would need to have 16 independent logic units for each phase and they all would need access to the two large arrays (k and r). I don't know if this implementation would fit on the fpga. It's definitely worth a try. Another idea is to just pipeline the four different phases. I donno, I'll try over winter break =D

[Gregorpm]

Now that I think about it, each of the logics would only need a single element from the k and r array! However, the original message being hashed needs to be used throughout the algorithm, but that's not to bad. Thanks again for the suggestion.

[rikuwillkillu]

what kind of situations can you use this for?

[Gregorpm]

A lot of websites use MD5 hashes for user passwords.

[avnsun]

really cool man!! really cool!!....

[ivanmayantsev]

You can decipher 10-15 hashes on 5 dollars for hash for me? sens84@mail.ru

[CDMCSD2]

@AlexandruBogdan81 Stratix II is pretty much 3 times faster than Cyclone 2 and

can be configured to crack AES codes, MD5 will be a joke for it.

Basically your question is like asking whether a Lamborghini Gallardio can be faster and

stronger than Mazda 3 or not.... :D

[smashthestack]

Great work and explanation dude =)

[Mushketer888]

You are genius!

I wish you good luck

[AlexandruBogdan81]

Wow !!!! awesome!! :) i have a fpga board too, stratix ii kit. do you think it will work?