Skip to content
dellswor edited this page Feb 17, 2014 · 2 revisions

O-SNAP security policies demand workers use an 8 digit pin, changed daily, to access secured resources. Executive management has requested a pin recovery tool since they tend to forget the pins and reset requires 24 hours. To be compliant with the organizational security policies, no system or person may keep pins in plain text or encrypted. All authorizations are done using an md5 checksum of the pin, which has no confidentiality requirements according to O-SNAP security policy.

In this project you will use the map pattern to accelerate the recovery process. Your program will take in an md5 hash of an 8 digit pin and print the recovered pin to the user.

A serial program has been provided for you that can successfully recover pins.

For the purposes of the lab, we kept the search space small enough for single threaded executions to return in reasonable time. 8 digit pins provide 100 million possible combinations and those each crack in under 90 seconds on an older 8 core host. How many hashes could be tried in a week? What if there were more cores like you can have with a GPU or rented Amazon compute resources? How safe are passwords when the hashed password database gets taken?

Clone this wiki locally