Better question: What would you pay for NTLM len8 tables?

[Bitweasil]

Let's assume that NTLM len8 tables of good quality get generated.

Let's further assume that they're several TB in size, perfected, so the only sane way of delivering them is through the mail, on hard disks. Also, assume I've got my cracker working with multihash, and cross platform.

What would you consider a sane price for this setup? Is $600-$800 shipped sane, considering it will be several 2TB drives (possibly external) with quite a few GPU-years of work behind it?

[blazer]

well where i'm at 2TB (internal) equates to roughly 100USD

so to be reasonable i would say
2x 2TB worth of tables $350-400 no more than $450 shipped.

problem is how many ppl will buy them just to use for fun?

The problem is if it's going to cost more than 800 you will probably better off buying several ATis and filling your comp up with those and bruteforce.

You would prob make more money charging people a couple of bux a hash to be honest.

Thats my 2cents by what do I know.

[Sc00bz]

NTLM len8:
Key space: 2^52.56
Chain length: 85,000?
Success rate: 99.9%?
Tables: 4?
2TB drives: 2?

For me Omni-7 is worth more even though NTLM len8 has a 2.5 times higher key space:
Key space: 2^51.26
Chain length: 68,000
Success rate: 99.9%
Tables: 4
2TB drives: 1

I would sell Omni-7 for:
$250 + cost of hard drive(s) and shipping ($398.05 US, $413.45 Mex/Can, $429.13 Others (I'd go with HITACHI Deskstar 7K2000 for newegg but it's currently out of stock))
$50 + cost of hard drive(s) and shipping (for people that helped)
Also sell access to it (free for people that helped)

[Bitweasil]

What is omni-7 specifically?

//EDIT: Oh, that's your setup.

The reason NTLM len8 is of value is that many businesses still use 8 character 4 character case passwords for things.

[Sc00bz]

Hmmm well in that case Omni-7 would be worthless. Unless it required at least 8 characters and a character from at least 3 (instead of 4) of the following upper case, lower case, numbers, symbols. Which in that case Omni-7's useful key space is cut in half and any one with a symbol in their password would be safe. So in that case NTLM len8 is worth more than Omni-7.

-----------------------------
Omni-8 2^56.20
... vs len8-9 2^59.15
Well hmm I'd go with len8-9

Omni-9 2^61.45 there we go
... vs len8-10 2^65.72
Hmmm

Oh I could just add symbol hybrids to the Omni sets to them more useful.

[Bitweasil]

Unless it required at least 8 characters and a character from at least 3 (instead of 4) of the following upper case, lower case, numbers, symbols.

I know in many arenas, "8 characters, upper, lower, numeric, symbol" is still considered a standard, safe password. For Windows machines. :-/

[quel]

Unless it required at least 8 characters and a character from at least 3 (instead of 4) of the following upper case, lower case, numbers, symbols.

I know in many arenas, "8 characters, upper, lower, numeric, symbol" is still considered a standard, safe password. For Windows machines. :-/

Ya that would be the default windows "password complexity." Minimum length 8 and 3 of the 4 character groups. That assumes the admin even turned on password complexity. Really this one comes down more to human behavior than brute force. ie: users love to do [A-Z][a-z]+[0-9]

[hackajar]

I picked up some standard tables (with special GPU support) for about $300. These are universal tables though.

http://project-rainbowcrack.com/buy.php

[Bitweasil]

Yeah, but those are only about a 96% hit rate IIRC.

I'd be doing 99%+ hit rate.

[rationalBean]

Necroing this thread, but I would definitely have a need for this set if it existed.