From: Jens Steube Date: Fri, 20 May 2016 22:39:22 +0000 (+0200) Subject: Some final fixes for d_return_buf refactorization; Initial kernels vor veracrypts... X-Git-Tag: v3.00~162^2 X-Git-Url: https://www.flypig.org.uk/git/?a=commitdiff_plain;h=c6c865e32e0a1f6796e86874b9dba6d2c723ca75;p=hashcat.git Some final fixes for d_return_buf refactorization; Initial kernels vor veracrypts SHA256 KDF (not working) --- diff --git a/OpenCL/m06211.cl b/OpenCL/m06211.cl index a6d3102..da07d43 100644 --- a/OpenCL/m06211.cl +++ b/OpenCL/m06211.cl @@ -671,8 +671,6 @@ __kernel void m06211_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -687,8 +685,6 @@ __kernel void m06211_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -703,8 +699,6 @@ __kernel void m06211_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06212.cl b/OpenCL/m06212.cl index 0b7003f..7262ac3 100644 --- a/OpenCL/m06212.cl +++ b/OpenCL/m06212.cl @@ -671,8 +671,6 @@ __kernel void m06212_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -687,8 +685,6 @@ __kernel void m06212_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -703,8 +699,6 @@ __kernel void m06212_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -742,8 +736,6 @@ __kernel void m06212_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -759,8 +751,6 @@ __kernel void m06212_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -776,8 +766,6 @@ __kernel void m06212_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06213.cl b/OpenCL/m06213.cl index 28cd4a6..0b49be0 100644 --- a/OpenCL/m06213.cl +++ b/OpenCL/m06213.cl @@ -671,8 +671,6 @@ __kernel void m06213_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -687,8 +685,6 @@ __kernel void m06213_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -703,8 +699,6 @@ __kernel void m06213_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -742,8 +736,6 @@ __kernel void m06213_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -759,8 +751,6 @@ __kernel void m06213_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -776,8 +766,6 @@ __kernel void m06213_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -816,8 +804,6 @@ __kernel void m06213_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -834,8 +820,6 @@ __kernel void m06213_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06221.cl b/OpenCL/m06221.cl index 477db80..5959263 100644 --- a/OpenCL/m06221.cl +++ b/OpenCL/m06221.cl @@ -579,8 +579,6 @@ __kernel void m06221_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -595,8 +593,6 @@ __kernel void m06221_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -611,8 +607,6 @@ __kernel void m06221_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06222.cl b/OpenCL/m06222.cl index 5b02b74..e416c66 100644 --- a/OpenCL/m06222.cl +++ b/OpenCL/m06222.cl @@ -579,8 +579,6 @@ __kernel void m06222_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -595,8 +593,6 @@ __kernel void m06222_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -611,8 +607,6 @@ __kernel void m06222_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -650,8 +644,6 @@ __kernel void m06222_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -667,8 +659,6 @@ __kernel void m06222_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -684,8 +674,6 @@ __kernel void m06222_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06223.cl b/OpenCL/m06223.cl index 92f30e0..c2007b0 100644 --- a/OpenCL/m06223.cl +++ b/OpenCL/m06223.cl @@ -579,8 +579,6 @@ __kernel void m06223_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -595,8 +593,6 @@ __kernel void m06223_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -611,8 +607,6 @@ __kernel void m06223_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -650,8 +644,6 @@ __kernel void m06223_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -667,8 +659,6 @@ __kernel void m06223_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -684,8 +674,6 @@ __kernel void m06223_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -724,8 +712,6 @@ __kernel void m06223_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -742,8 +728,6 @@ __kernel void m06223_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06231.cl b/OpenCL/m06231.cl index 1f6fc82..90f248c 100644 --- a/OpenCL/m06231.cl +++ b/OpenCL/m06231.cl @@ -2216,8 +2216,6 @@ __kernel void m06231_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2232,8 +2230,6 @@ __kernel void m06231_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2248,8 +2244,6 @@ __kernel void m06231_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06232.cl b/OpenCL/m06232.cl index 6a705ec..942de68 100644 --- a/OpenCL/m06232.cl +++ b/OpenCL/m06232.cl @@ -1985,8 +1985,6 @@ __kernel void m06232_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2001,8 +1999,6 @@ __kernel void m06232_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2017,8 +2013,6 @@ __kernel void m06232_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2056,8 +2050,6 @@ __kernel void m06232_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2073,8 +2065,6 @@ __kernel void m06232_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2090,8 +2080,6 @@ __kernel void m06232_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06233.cl b/OpenCL/m06233.cl index 2b858e9..acb6719 100644 --- a/OpenCL/m06233.cl +++ b/OpenCL/m06233.cl @@ -1985,8 +1985,6 @@ __kernel void m06233_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2001,8 +1999,6 @@ __kernel void m06233_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2017,8 +2013,6 @@ __kernel void m06233_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2056,8 +2050,6 @@ __kernel void m06233_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2073,8 +2065,6 @@ __kernel void m06233_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2090,8 +2080,6 @@ __kernel void m06233_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2130,8 +2118,6 @@ __kernel void m06233_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -2148,8 +2134,6 @@ __kernel void m06233_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m06800.cl b/OpenCL/m06800.cl index cdcfed7..d2e6915 100644 --- a/OpenCL/m06800.cl +++ b/OpenCL/m06800.cl @@ -1574,8 +1574,6 @@ __kernel void m06800_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf && (out[3] == salt_buf[3])) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, 0); - - d_return_buf[lid] = 1; } /** diff --git a/OpenCL/m07500_a0.cl b/OpenCL/m07500_a0.cl index 7f353f1..0393d8d 100644 --- a/OpenCL/m07500_a0.cl +++ b/OpenCL/m07500_a0.cl @@ -641,8 +641,6 @@ __kernel void m07500_m04 (__global pw_t *pws, __global kernel_rule_t *rules_buf, if (decrypt_and_check (&rc4_keys[lid], tmp, timestamp_ct) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } @@ -744,8 +742,6 @@ __kernel void m07500_s04 (__global pw_t *pws, __global kernel_rule_t *rules_buf, if (decrypt_and_check (&rc4_keys[lid], tmp, timestamp_ct) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m07500_a1.cl b/OpenCL/m07500_a1.cl index a7ec174..6983b16 100644 --- a/OpenCL/m07500_a1.cl +++ b/OpenCL/m07500_a1.cl @@ -689,8 +689,6 @@ __kernel void m07500_m04 (__global pw_t *pws, __global kernel_rule_t *rules_buf, if (decrypt_and_check (&rc4_keys[lid], tmp, timestamp_ct) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } @@ -842,8 +840,6 @@ __kernel void m07500_s04 (__global pw_t *pws, __global kernel_rule_t *rules_buf, if (decrypt_and_check (&rc4_keys[lid], tmp, timestamp_ct) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m07500_a3.cl b/OpenCL/m07500_a3.cl index 10d105c..1e8eb93 100644 --- a/OpenCL/m07500_a3.cl +++ b/OpenCL/m07500_a3.cl @@ -635,8 +635,6 @@ void m07500 (__local RC4_KEY *rc4_keys, u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[ if (decrypt_and_check (&rc4_keys[lid], tmp, timestamp_ct) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m08800.cl b/OpenCL/m08800.cl index c81dda6..38a3033 100644 --- a/OpenCL/m08800.cl +++ b/OpenCL/m08800.cl @@ -1894,8 +1894,6 @@ __kernel void m08800_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if ((r0 == 0x4f44534d) && (r1 == 0x302e3553)) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, 0); - - d_return_buf[lid] = 1; } } @@ -1962,8 +1960,6 @@ __kernel void m08800_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if ((r[5] < 2) && (r[6] < 16) && ((r[14] & 0xffff) == 0xEF53)) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, 0); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m11300.cl b/OpenCL/m11300.cl index 04b11c8..3bfa242 100644 --- a/OpenCL/m11300.cl +++ b/OpenCL/m11300.cl @@ -1350,7 +1350,5 @@ __kernel void m11300_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf && (out[3] == 0x10101010)) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, 0); - - d_return_buf[lid] = 1; } } diff --git a/OpenCL/m11600.cl b/OpenCL/m11600.cl index 0c0deff..c7af848 100644 --- a/OpenCL/m11600.cl +++ b/OpenCL/m11600.cl @@ -2016,8 +2016,6 @@ __kernel void m11600_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if ((out[0] == 0) && (out[1] == 0) && (out[2] == 0) && (out[3] == 0)) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, 0); - - d_return_buf[lid] = 1; } } diff --git a/OpenCL/m13100_a0.cl b/OpenCL/m13100_a0.cl index d36b4a3..bd16342 100644 --- a/OpenCL/m13100_a0.cl +++ b/OpenCL/m13100_a0.cl @@ -780,8 +780,6 @@ void m13100 (__local RC4_KEY *rc4_keys, u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[ if (decrypt_and_check (&rc4_keys[lid], tmp, krb5tgs_bufs[salt_pos].edata2, krb5tgs_bufs[salt_pos].edata2_len, K2, checksum) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } @@ -867,8 +865,6 @@ __kernel void m13100_m04 (__global pw_t *pws, __global kernel_rule_t *rules_buf, if (decrypt_and_check (&rc4_keys[lid], tmp, krb5tgs_bufs[salt_pos].edata2, krb5tgs_bufs[salt_pos].edata2_len, K2, checksum) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } @@ -962,8 +958,6 @@ __kernel void m13100_s04 (__global pw_t *pws, __global kernel_rule_t *rules_buf, if (decrypt_and_check (&rc4_keys[lid], tmp, krb5tgs_bufs[salt_pos].edata2, krb5tgs_bufs[salt_pos].edata2_len, K2, checksum) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m13100_a1.cl b/OpenCL/m13100_a1.cl index fdaf4ad..c49f2fd 100644 --- a/OpenCL/m13100_a1.cl +++ b/OpenCL/m13100_a1.cl @@ -860,8 +860,6 @@ __kernel void m13100_m04 (__global pw_t *pws, __global kernel_rule_t *rules_buf, if (decrypt_and_check (&rc4_keys[lid], tmp, krb5tgs_bufs[salt_pos].edata2, krb5tgs_bufs[salt_pos].edata2_len, K2, checksum) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } @@ -1004,8 +1002,6 @@ __kernel void m13100_s04 (__global pw_t *pws, __global kernel_rule_t *rules_buf, if (decrypt_and_check (&rc4_keys[lid], tmp, krb5tgs_bufs[salt_pos].edata2, krb5tgs_bufs[salt_pos].edata2_len, K2, checksum) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m13100_a3.cl b/OpenCL/m13100_a3.cl index 63a1e19..b549673 100644 --- a/OpenCL/m13100_a3.cl +++ b/OpenCL/m13100_a3.cl @@ -782,8 +782,6 @@ void m13100 (__local RC4_KEY *rc4_keys, u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[ if (decrypt_and_check (&rc4_keys[lid], tmp, krb5tgs_bufs[salt_pos].edata2, krb5tgs_bufs[salt_pos].edata2_len, K2, checksum) == 1) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m13200.cl b/OpenCL/m13200.cl index d5e0606..6027cca 100644 --- a/OpenCL/m13200.cl +++ b/OpenCL/m13200.cl @@ -1228,7 +1228,5 @@ __kernel void m13200_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf if(tmps[gid].cipher[0]==0xA6A6A6A6 && tmps[gid].cipher[1]==0xA6A6A6A6) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } diff --git a/OpenCL/m13400.cl b/OpenCL/m13400.cl index baf4470..e0ec6d9 100644 --- a/OpenCL/m13400.cl +++ b/OpenCL/m13400.cl @@ -1759,8 +1759,6 @@ __kernel void m13400_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf && esalt_bufs[salt_pos].contents_hash[7] == final_digest[7]) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } else @@ -1965,8 +1963,6 @@ __kernel void m13400_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf && esalt_bufs[salt_pos].contents_hash[7] == final_digest[7]) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } @@ -2005,8 +2001,6 @@ __kernel void m13400_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf && esalt_bufs[salt_pos].expected_bytes[3] == out[3]) { mark_hash (plains_buf, d_return_buf, salt_pos, 0, digests_offset + 0, gid, il_pos); - - d_return_buf[lid] = 1; } } } diff --git a/OpenCL/m13751.cl b/OpenCL/m13751.cl new file mode 100644 index 0000000..3892cde --- /dev/null +++ b/OpenCL/m13751.cl @@ -0,0 +1,666 @@ +/** + * Author......: Jens Steube + * License.....: MIT + */ + +#define _SHA256_ + +#include "include/constants.h" +#include "include/kernel_vendor.h" + +#define DGST_R0 0 +#define DGST_R1 1 +#define DGST_R2 2 +#define DGST_R3 3 + +#include "include/kernel_functions.c" +#include "OpenCL/types_ocl.c" +#include "OpenCL/common.c" + +#include "OpenCL/kernel_aes256.c" +#include "OpenCL/kernel_twofish256.c" +#include "OpenCL/kernel_serpent256.c" + +__constant u32 k_sha256[64] = +{ + SHA256C00, SHA256C01, SHA256C02, SHA256C03, + SHA256C04, SHA256C05, SHA256C06, SHA256C07, + SHA256C08, SHA256C09, SHA256C0a, SHA256C0b, + SHA256C0c, SHA256C0d, SHA256C0e, SHA256C0f, + SHA256C10, SHA256C11, SHA256C12, SHA256C13, + SHA256C14, SHA256C15, SHA256C16, SHA256C17, + SHA256C18, SHA256C19, SHA256C1a, SHA256C1b, + SHA256C1c, SHA256C1d, SHA256C1e, SHA256C1f, + SHA256C20, SHA256C21, SHA256C22, SHA256C23, + SHA256C24, SHA256C25, SHA256C26, SHA256C27, + SHA256C28, SHA256C29, SHA256C2a, SHA256C2b, + SHA256C2c, SHA256C2d, SHA256C2e, SHA256C2f, + SHA256C30, SHA256C31, SHA256C32, SHA256C33, + SHA256C34, SHA256C35, SHA256C36, SHA256C37, + SHA256C38, SHA256C39, SHA256C3a, SHA256C3b, + SHA256C3c, SHA256C3d, SHA256C3e, SHA256C3f, +}; + +void sha256_transform (const u32 w0[4], const u32 w1[4], const u32 w2[4], const u32 w3[4], u32 digest[8]) +{ + u32 a = digest[0]; + u32 b = digest[1]; + u32 c = digest[2]; + u32 d = digest[3]; + u32 e = digest[4]; + u32 f = digest[5]; + u32 g = digest[6]; + u32 h = digest[7]; + + u32 w0_t = w0[0]; + u32 w1_t = w0[1]; + u32 w2_t = w0[2]; + u32 w3_t = w0[3]; + u32 w4_t = w1[0]; + u32 w5_t = w1[1]; + u32 w6_t = w1[2]; + u32 w7_t = w1[3]; + u32 w8_t = w2[0]; + u32 w9_t = w2[1]; + u32 wa_t = w2[2]; + u32 wb_t = w2[3]; + u32 wc_t = w3[0]; + u32 wd_t = w3[1]; + u32 we_t = w3[2]; + u32 wf_t = w3[3]; + + #define ROUND_EXPAND() \ + { \ + w0_t = SHA256_EXPAND (we_t, w9_t, w1_t, w0_t); \ + w1_t = SHA256_EXPAND (wf_t, wa_t, w2_t, w1_t); \ + w2_t = SHA256_EXPAND (w0_t, wb_t, w3_t, w2_t); \ + w3_t = SHA256_EXPAND (w1_t, wc_t, w4_t, w3_t); \ + w4_t = SHA256_EXPAND (w2_t, wd_t, w5_t, w4_t); \ + w5_t = SHA256_EXPAND (w3_t, we_t, w6_t, w5_t); \ + w6_t = SHA256_EXPAND (w4_t, wf_t, w7_t, w6_t); \ + w7_t = SHA256_EXPAND (w5_t, w0_t, w8_t, w7_t); \ + w8_t = SHA256_EXPAND (w6_t, w1_t, w9_t, w8_t); \ + w9_t = SHA256_EXPAND (w7_t, w2_t, wa_t, w9_t); \ + wa_t = SHA256_EXPAND (w8_t, w3_t, wb_t, wa_t); \ + wb_t = SHA256_EXPAND (w9_t, w4_t, wc_t, wb_t); \ + wc_t = SHA256_EXPAND (wa_t, w5_t, wd_t, wc_t); \ + wd_t = SHA256_EXPAND (wb_t, w6_t, we_t, wd_t); \ + we_t = SHA256_EXPAND (wc_t, w7_t, wf_t, we_t); \ + wf_t = SHA256_EXPAND (wd_t, w8_t, w0_t, wf_t); \ + } + + #define ROUND_STEP(i) \ + { \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, a, b, c, d, e, f, g, h, w0_t, k_sha256[i + 0]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, h, a, b, c, d, e, f, g, w1_t, k_sha256[i + 1]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, g, h, a, b, c, d, e, f, w2_t, k_sha256[i + 2]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, f, g, h, a, b, c, d, e, w3_t, k_sha256[i + 3]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, e, f, g, h, a, b, c, d, w4_t, k_sha256[i + 4]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, d, e, f, g, h, a, b, c, w5_t, k_sha256[i + 5]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, c, d, e, f, g, h, a, b, w6_t, k_sha256[i + 6]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, b, c, d, e, f, g, h, a, w7_t, k_sha256[i + 7]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, a, b, c, d, e, f, g, h, w8_t, k_sha256[i + 8]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, h, a, b, c, d, e, f, g, w9_t, k_sha256[i + 9]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, g, h, a, b, c, d, e, f, wa_t, k_sha256[i + 10]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, f, g, h, a, b, c, d, e, wb_t, k_sha256[i + 11]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, e, f, g, h, a, b, c, d, wc_t, k_sha256[i + 12]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, d, e, f, g, h, a, b, c, wd_t, k_sha256[i + 13]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, c, d, e, f, g, h, a, b, we_t, k_sha256[i + 14]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, b, c, d, e, f, g, h, a, wf_t, k_sha256[i + 15]); \ + } + + ROUND_STEP (0); + + #ifdef _unroll + #pragma unroll + #endif + for (int i = 16; i < 64; i += 16) + { + ROUND_EXPAND (); ROUND_STEP (i); + } + + digest[0] += a; + digest[1] += b; + digest[2] += c; + digest[3] += d; + digest[4] += e; + digest[5] += f; + digest[6] += g; + digest[7] += h; +} + +void hmac_sha256_pad (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 ipad[8], u32 opad[8]) +{ + w0[0] = w0[0] ^ 0x36363636; + w0[1] = w0[1] ^ 0x36363636; + w0[2] = w0[2] ^ 0x36363636; + w0[3] = w0[3] ^ 0x36363636; + w1[0] = w1[0] ^ 0x36363636; + w1[1] = w1[1] ^ 0x36363636; + w1[2] = w1[2] ^ 0x36363636; + w1[3] = w1[3] ^ 0x36363636; + w2[0] = w2[0] ^ 0x36363636; + w2[1] = w2[1] ^ 0x36363636; + w2[2] = w2[2] ^ 0x36363636; + w2[3] = w2[3] ^ 0x36363636; + w3[0] = w3[0] ^ 0x36363636; + w3[1] = w3[1] ^ 0x36363636; + w3[2] = w3[2] ^ 0x36363636; + w3[3] = w3[3] ^ 0x36363636; + + ipad[0] = SHA256M_A; + ipad[1] = SHA256M_B; + ipad[2] = SHA256M_C; + ipad[3] = SHA256M_D; + ipad[4] = SHA256M_E; + ipad[5] = SHA256M_F; + ipad[6] = SHA256M_G; + ipad[7] = SHA256M_H; + + sha256_transform (w0, w1, w2, w3, ipad); + + w0[0] = w0[0] ^ 0x6a6a6a6a; + w0[1] = w0[1] ^ 0x6a6a6a6a; + w0[2] = w0[2] ^ 0x6a6a6a6a; + w0[3] = w0[3] ^ 0x6a6a6a6a; + w1[0] = w1[0] ^ 0x6a6a6a6a; + w1[1] = w1[1] ^ 0x6a6a6a6a; + w1[2] = w1[2] ^ 0x6a6a6a6a; + w1[3] = w1[3] ^ 0x6a6a6a6a; + w2[0] = w2[0] ^ 0x6a6a6a6a; + w2[1] = w2[1] ^ 0x6a6a6a6a; + w2[2] = w2[2] ^ 0x6a6a6a6a; + w2[3] = w2[3] ^ 0x6a6a6a6a; + w3[0] = w3[0] ^ 0x6a6a6a6a; + w3[1] = w3[1] ^ 0x6a6a6a6a; + w3[2] = w3[2] ^ 0x6a6a6a6a; + w3[3] = w3[3] ^ 0x6a6a6a6a; + + opad[0] = SHA256M_A; + opad[1] = SHA256M_B; + opad[2] = SHA256M_C; + opad[3] = SHA256M_D; + opad[4] = SHA256M_E; + opad[5] = SHA256M_F; + opad[6] = SHA256M_G; + opad[7] = SHA256M_H; + + sha256_transform (w0, w1, w2, w3, opad); +} + +void hmac_sha256_run (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 ipad[8], u32 opad[8], u32 digest[8]) +{ + digest[0] = ipad[0]; + digest[1] = ipad[1]; + digest[2] = ipad[2]; + digest[3] = ipad[3]; + digest[4] = ipad[4]; + digest[5] = ipad[5]; + digest[6] = ipad[6]; + digest[7] = ipad[7]; + + sha256_transform (w0, w1, w2, w3, digest); + + w0[0] = digest[0]; + w0[1] = digest[1]; + w0[2] = digest[2]; + w0[3] = digest[3]; + w1[0] = digest[4]; + w1[1] = digest[5]; + w1[2] = digest[6]; + w1[3] = digest[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + digest[0] = opad[0]; + digest[1] = opad[1]; + digest[2] = opad[2]; + digest[3] = opad[3]; + digest[4] = opad[4]; + digest[5] = opad[5]; + digest[6] = opad[6]; + digest[7] = opad[7]; + + sha256_transform (w0, w1, w2, w3, digest); +} + +void hmac_sha256_run2 (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 w4[4], u32 w5[4], u32 w6[4], u32 w7[4], u32 ipad[8], u32 opad[8], u32 digest[8]) +{ + digest[0] = ipad[0]; + digest[1] = ipad[1]; + digest[2] = ipad[2]; + digest[3] = ipad[3]; + digest[4] = ipad[4]; + digest[5] = ipad[5]; + digest[6] = ipad[6]; + digest[7] = ipad[7]; + + sha256_transform (w0, w1, w2, w3, digest); + sha256_transform (w4, w5, w6, w7, digest); + + w0[0] = digest[0]; + w0[1] = digest[1]; + w0[2] = digest[2]; + w0[3] = digest[3]; + w1[0] = digest[4]; + w1[1] = digest[5]; + w1[2] = digest[6]; + w1[3] = digest[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + digest[0] = opad[0]; + digest[1] = opad[1]; + digest[2] = opad[2]; + digest[3] = opad[3]; + digest[4] = opad[4]; + digest[5] = opad[5]; + digest[6] = opad[6]; + digest[7] = opad[7]; + + sha256_transform (w0, w1, w2, w3, digest); +} + +u32 u8add (const u32 a, const u32 b) +{ + const u32 a1 = (a >> 0) & 0xff; + const u32 a2 = (a >> 8) & 0xff; + const u32 a3 = (a >> 16) & 0xff; + const u32 a4 = (a >> 24) & 0xff; + + const u32 b1 = (b >> 0) & 0xff; + const u32 b2 = (b >> 8) & 0xff; + const u32 b3 = (b >> 16) & 0xff; + const u32 b4 = (b >> 24) & 0xff; + + const u32 r1 = (a1 + b1) & 0xff; + const u32 r2 = (a2 + b2) & 0xff; + const u32 r3 = (a3 + b3) & 0xff; + const u32 r4 = (a4 + b4) & 0xff; + + const u32 r = r1 << 0 + | r2 << 8 + | r3 << 16 + | r4 << 24; + + return r; +} + +__kernel void m13751_init (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + /** + * base + */ + + const u32 gid = get_global_id (0); + + if (gid >= gid_max) return; + + u32 w0[4]; + u32 w1[4]; + u32 w2[4]; + u32 w3[4]; + + w0[0] = pws[gid].i[ 0]; + w0[1] = pws[gid].i[ 1]; + w0[2] = pws[gid].i[ 2]; + w0[3] = pws[gid].i[ 3]; + w1[0] = pws[gid].i[ 4]; + w1[1] = pws[gid].i[ 5]; + w1[2] = pws[gid].i[ 6]; + w1[3] = pws[gid].i[ 7]; + w2[0] = pws[gid].i[ 8]; + w2[1] = pws[gid].i[ 9]; + w2[2] = pws[gid].i[10]; + w2[3] = pws[gid].i[11]; + w3[0] = pws[gid].i[12]; + w3[1] = pws[gid].i[13]; + w3[2] = pws[gid].i[14]; + w3[3] = pws[gid].i[15]; + + /** + * keyfile + */ + + w0[0] = u8add (w0[0], esalt_bufs[salt_pos].keyfile_buf[ 0]); + w0[1] = u8add (w0[1], esalt_bufs[salt_pos].keyfile_buf[ 1]); + w0[2] = u8add (w0[2], esalt_bufs[salt_pos].keyfile_buf[ 2]); + w0[3] = u8add (w0[3], esalt_bufs[salt_pos].keyfile_buf[ 3]); + w1[0] = u8add (w1[0], esalt_bufs[salt_pos].keyfile_buf[ 4]); + w1[1] = u8add (w1[1], esalt_bufs[salt_pos].keyfile_buf[ 5]); + w1[2] = u8add (w1[2], esalt_bufs[salt_pos].keyfile_buf[ 6]); + w1[3] = u8add (w1[3], esalt_bufs[salt_pos].keyfile_buf[ 7]); + w2[0] = u8add (w2[0], esalt_bufs[salt_pos].keyfile_buf[ 8]); + w2[1] = u8add (w2[1], esalt_bufs[salt_pos].keyfile_buf[ 9]); + w2[2] = u8add (w2[2], esalt_bufs[salt_pos].keyfile_buf[10]); + w2[3] = u8add (w2[3], esalt_bufs[salt_pos].keyfile_buf[11]); + w3[0] = u8add (w3[0], esalt_bufs[salt_pos].keyfile_buf[12]); + w3[1] = u8add (w3[1], esalt_bufs[salt_pos].keyfile_buf[13]); + w3[2] = u8add (w3[2], esalt_bufs[salt_pos].keyfile_buf[14]); + w3[3] = u8add (w3[3], esalt_bufs[salt_pos].keyfile_buf[15]); + + w0[0] = swap32 (w0[0]); + w0[1] = swap32 (w0[1]); + w0[2] = swap32 (w0[2]); + w0[3] = swap32 (w0[3]); + w1[0] = swap32 (w1[0]); + w1[1] = swap32 (w1[1]); + w1[2] = swap32 (w1[2]); + w1[3] = swap32 (w1[3]); + w2[0] = swap32 (w2[0]); + w2[1] = swap32 (w2[1]); + w2[2] = swap32 (w2[2]); + w2[3] = swap32 (w2[3]); + w3[0] = swap32 (w3[0]); + w3[1] = swap32 (w3[1]); + w3[2] = swap32 (w3[2]); + w3[3] = swap32 (w3[3]); + + /** + * salt + */ + + u32 s0[4]; + u32 s1[4]; + u32 s2[4]; + u32 s3[4]; + u32 s4[4]; + u32 s5[4]; + u32 s6[4]; + u32 s7[4]; + + s0[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 0]); + s0[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 1]); + s0[2] = swap32 (esalt_bufs[salt_pos].salt_buf[ 2]); + s0[3] = swap32 (esalt_bufs[salt_pos].salt_buf[ 3]); + s1[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 4]); + s1[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 5]); + s1[2] = swap32 (esalt_bufs[salt_pos].salt_buf[ 6]); + s1[3] = swap32 (esalt_bufs[salt_pos].salt_buf[ 7]); + s2[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 8]); + s2[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 9]); + s2[2] = swap32 (esalt_bufs[salt_pos].salt_buf[10]); + s2[3] = swap32 (esalt_bufs[salt_pos].salt_buf[11]); + s3[0] = swap32 (esalt_bufs[salt_pos].salt_buf[12]); + s3[1] = swap32 (esalt_bufs[salt_pos].salt_buf[13]); + s3[2] = swap32 (esalt_bufs[salt_pos].salt_buf[14]); + s3[3] = swap32 (esalt_bufs[salt_pos].salt_buf[15]); + s4[0] = 0; + s4[1] = 0x80000000; + s4[2] = 0; + s4[3] = 0; + s5[0] = 0; + s5[1] = 0; + s5[2] = 0; + s5[3] = 0; + s6[0] = 0; + s6[1] = 0; + s6[2] = 0; + s6[3] = 0; + s7[0] = 0; + s7[1] = 0; + s7[2] = 0; + s7[3] = (64 + 64 + 4) * 8; + + const u32 truecrypt_mdlen = salt_bufs[0].truecrypt_mdlen; + + u32 ipad[8]; + u32 opad[8]; + + hmac_sha256_pad (w0, w1, w2, w3, ipad, opad); + + tmps[gid].ipad[0] = ipad[0]; + tmps[gid].ipad[1] = ipad[1]; + tmps[gid].ipad[2] = ipad[2]; + tmps[gid].ipad[3] = ipad[3]; + tmps[gid].ipad[4] = ipad[4]; + tmps[gid].ipad[5] = ipad[5]; + tmps[gid].ipad[6] = ipad[6]; + tmps[gid].ipad[7] = ipad[7]; + + tmps[gid].opad[0] = opad[0]; + tmps[gid].opad[1] = opad[1]; + tmps[gid].opad[2] = opad[2]; + tmps[gid].opad[3] = opad[3]; + tmps[gid].opad[4] = opad[4]; + tmps[gid].opad[5] = opad[5]; + tmps[gid].opad[6] = opad[6]; + tmps[gid].opad[7] = opad[7]; + + for (u32 i = 0, j = 1; i < ((truecrypt_mdlen / 8) / 4); i += 8, j += 1) + { + s4[0] = j; + + u32 dgst[8]; + + hmac_sha256_run2 (s0, s1, s2, s3, s4, s5, s6, s7, ipad, opad, dgst); + + tmps[gid].dgst[i + 0] = dgst[0]; + tmps[gid].dgst[i + 1] = dgst[1]; + tmps[gid].dgst[i + 2] = dgst[2]; + tmps[gid].dgst[i + 3] = dgst[3]; + tmps[gid].dgst[i + 4] = dgst[4]; + tmps[gid].dgst[i + 5] = dgst[5]; + tmps[gid].dgst[i + 6] = dgst[6]; + tmps[gid].dgst[i + 7] = dgst[7]; + + tmps[gid].out[i + 0] = dgst[0]; + tmps[gid].out[i + 1] = dgst[1]; + tmps[gid].out[i + 2] = dgst[2]; + tmps[gid].out[i + 3] = dgst[3]; + tmps[gid].out[i + 4] = dgst[4]; + tmps[gid].out[i + 5] = dgst[5]; + tmps[gid].out[i + 6] = dgst[6]; + tmps[gid].out[i + 7] = dgst[7]; + } +} + +__kernel void m13751_loop (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + const u32 truecrypt_mdlen = salt_bufs[0].truecrypt_mdlen; + + const u32 gid = get_global_id (0); + + if (gid >= gid_max) return; + + u32 ipad[8]; + + ipad[0] = tmps[gid].ipad[0]; + ipad[1] = tmps[gid].ipad[1]; + ipad[2] = tmps[gid].ipad[2]; + ipad[3] = tmps[gid].ipad[3]; + ipad[4] = tmps[gid].ipad[4]; + ipad[5] = tmps[gid].ipad[5]; + ipad[6] = tmps[gid].ipad[6]; + ipad[7] = tmps[gid].ipad[7]; + + u32 opad[8]; + + opad[0] = tmps[gid].opad[0]; + opad[1] = tmps[gid].opad[1]; + opad[2] = tmps[gid].opad[2]; + opad[3] = tmps[gid].opad[3]; + opad[4] = tmps[gid].opad[4]; + opad[5] = tmps[gid].opad[5]; + opad[6] = tmps[gid].opad[6]; + opad[7] = tmps[gid].opad[7]; + + for (u32 i = 0; i < ((truecrypt_mdlen / 8) / 4); i += 8) + { + u32 dgst[8]; + + dgst[0] = tmps[gid].dgst[i + 0]; + dgst[1] = tmps[gid].dgst[i + 1]; + dgst[2] = tmps[gid].dgst[i + 2]; + dgst[3] = tmps[gid].dgst[i + 3]; + dgst[4] = tmps[gid].dgst[i + 4]; + dgst[5] = tmps[gid].dgst[i + 5]; + dgst[6] = tmps[gid].dgst[i + 6]; + dgst[7] = tmps[gid].dgst[i + 7]; + + u32 out[8]; + + out[0] = tmps[gid].out[i + 0]; + out[1] = tmps[gid].out[i + 1]; + out[2] = tmps[gid].out[i + 2]; + out[3] = tmps[gid].out[i + 3]; + out[4] = tmps[gid].out[i + 4]; + out[5] = tmps[gid].out[i + 5]; + out[6] = tmps[gid].out[i + 6]; + out[7] = tmps[gid].out[i + 7]; + + for (u32 j = 0; j < loop_cnt; j++) + { + u32 w0[4]; + u32 w1[4]; + u32 w2[4]; + u32 w3[4]; + + w0[0] = dgst[0]; + w0[1] = dgst[1]; + w0[2] = dgst[2]; + w0[3] = dgst[3]; + w1[0] = dgst[4]; + w1[1] = dgst[5]; + w1[2] = dgst[6]; + w1[3] = dgst[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + hmac_sha256_run (w0, w1, w2, w3, ipad, opad, dgst); + + out[0] ^= dgst[0]; + out[1] ^= dgst[1]; + out[2] ^= dgst[2]; + out[3] ^= dgst[3]; + out[4] ^= dgst[4]; + out[5] ^= dgst[5]; + out[6] ^= dgst[6]; + out[7] ^= dgst[7]; + } + + tmps[gid].dgst[i + 0] = dgst[0]; + tmps[gid].dgst[i + 1] = dgst[1]; + tmps[gid].dgst[i + 2] = dgst[2]; + tmps[gid].dgst[i + 3] = dgst[3]; + tmps[gid].dgst[i + 4] = dgst[4]; + tmps[gid].dgst[i + 5] = dgst[5]; + tmps[gid].dgst[i + 6] = dgst[6]; + tmps[gid].dgst[i + 7] = dgst[7]; + + tmps[gid].out[i + 0] = out[0]; + tmps[gid].out[i + 1] = out[1]; + tmps[gid].out[i + 2] = out[2]; + tmps[gid].out[i + 3] = out[3]; + tmps[gid].out[i + 4] = out[4]; + tmps[gid].out[i + 5] = out[5]; + tmps[gid].out[i + 6] = out[6]; + tmps[gid].out[i + 7] = out[7]; + } +} + +__kernel void m13751_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + /** + * base + */ + + const u32 gid = get_global_id (0); + const u32 lid = get_local_id (0); + + if (gid >= gid_max) return; + + u32 ukey1[8]; + + ukey1[0] = swap32 (tmps[gid].out[ 0]); + ukey1[1] = swap32 (tmps[gid].out[ 1]); + ukey1[2] = swap32 (tmps[gid].out[ 2]); + ukey1[3] = swap32 (tmps[gid].out[ 3]); + ukey1[4] = swap32 (tmps[gid].out[ 4]); + ukey1[5] = swap32 (tmps[gid].out[ 5]); + ukey1[6] = swap32 (tmps[gid].out[ 6]); + ukey1[7] = swap32 (tmps[gid].out[ 7]); + + u32 ukey2[8]; + + ukey2[0] = swap32 (tmps[gid].out[ 8]); + ukey2[1] = swap32 (tmps[gid].out[ 9]); + ukey2[2] = swap32 (tmps[gid].out[10]); + ukey2[3] = swap32 (tmps[gid].out[11]); + ukey2[4] = swap32 (tmps[gid].out[12]); + ukey2[5] = swap32 (tmps[gid].out[13]); + ukey2[6] = swap32 (tmps[gid].out[14]); + ukey2[7] = swap32 (tmps[gid].out[15]); + + u32 data[4]; + + data[0] = esalt_bufs[0].data_buf[0]; + data[1] = esalt_bufs[0].data_buf[1]; + data[2] = esalt_bufs[0].data_buf[2]; + data[3] = esalt_bufs[0].data_buf[3]; + + const u32 signature = esalt_bufs[0].signature; + + u32 tmp[4]; + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + aes256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + serpent256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + twofish256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } +} + diff --git a/OpenCL/m13752.cl b/OpenCL/m13752.cl new file mode 100644 index 0000000..b392ad2 --- /dev/null +++ b/OpenCL/m13752.cl @@ -0,0 +1,732 @@ +/** + * Author......: Jens Steube + * License.....: MIT + */ + +#define _SHA256_ + +#include "include/constants.h" +#include "include/kernel_vendor.h" + +#define DGST_R0 0 +#define DGST_R1 1 +#define DGST_R2 2 +#define DGST_R3 3 + +#include "include/kernel_functions.c" +#include "OpenCL/types_ocl.c" +#include "OpenCL/common.c" + +#include "OpenCL/kernel_aes256.c" +#include "OpenCL/kernel_twofish256.c" +#include "OpenCL/kernel_serpent256.c" + +__constant u32 k_sha256[64] = +{ + SHA256C00, SHA256C01, SHA256C02, SHA256C03, + SHA256C04, SHA256C05, SHA256C06, SHA256C07, + SHA256C08, SHA256C09, SHA256C0a, SHA256C0b, + SHA256C0c, SHA256C0d, SHA256C0e, SHA256C0f, + SHA256C10, SHA256C11, SHA256C12, SHA256C13, + SHA256C14, SHA256C15, SHA256C16, SHA256C17, + SHA256C18, SHA256C19, SHA256C1a, SHA256C1b, + SHA256C1c, SHA256C1d, SHA256C1e, SHA256C1f, + SHA256C20, SHA256C21, SHA256C22, SHA256C23, + SHA256C24, SHA256C25, SHA256C26, SHA256C27, + SHA256C28, SHA256C29, SHA256C2a, SHA256C2b, + SHA256C2c, SHA256C2d, SHA256C2e, SHA256C2f, + SHA256C30, SHA256C31, SHA256C32, SHA256C33, + SHA256C34, SHA256C35, SHA256C36, SHA256C37, + SHA256C38, SHA256C39, SHA256C3a, SHA256C3b, + SHA256C3c, SHA256C3d, SHA256C3e, SHA256C3f, +}; + +void sha256_transform (const u32 w0[4], const u32 w1[4], const u32 w2[4], const u32 w3[4], u32 digest[8]) +{ + u32 a = digest[0]; + u32 b = digest[1]; + u32 c = digest[2]; + u32 d = digest[3]; + u32 e = digest[4]; + u32 f = digest[5]; + u32 g = digest[6]; + u32 h = digest[7]; + + u32 w0_t = w0[0]; + u32 w1_t = w0[1]; + u32 w2_t = w0[2]; + u32 w3_t = w0[3]; + u32 w4_t = w1[0]; + u32 w5_t = w1[1]; + u32 w6_t = w1[2]; + u32 w7_t = w1[3]; + u32 w8_t = w2[0]; + u32 w9_t = w2[1]; + u32 wa_t = w2[2]; + u32 wb_t = w2[3]; + u32 wc_t = w3[0]; + u32 wd_t = w3[1]; + u32 we_t = w3[2]; + u32 wf_t = w3[3]; + + #define ROUND_EXPAND() \ + { \ + w0_t = SHA256_EXPAND (we_t, w9_t, w1_t, w0_t); \ + w1_t = SHA256_EXPAND (wf_t, wa_t, w2_t, w1_t); \ + w2_t = SHA256_EXPAND (w0_t, wb_t, w3_t, w2_t); \ + w3_t = SHA256_EXPAND (w1_t, wc_t, w4_t, w3_t); \ + w4_t = SHA256_EXPAND (w2_t, wd_t, w5_t, w4_t); \ + w5_t = SHA256_EXPAND (w3_t, we_t, w6_t, w5_t); \ + w6_t = SHA256_EXPAND (w4_t, wf_t, w7_t, w6_t); \ + w7_t = SHA256_EXPAND (w5_t, w0_t, w8_t, w7_t); \ + w8_t = SHA256_EXPAND (w6_t, w1_t, w9_t, w8_t); \ + w9_t = SHA256_EXPAND (w7_t, w2_t, wa_t, w9_t); \ + wa_t = SHA256_EXPAND (w8_t, w3_t, wb_t, wa_t); \ + wb_t = SHA256_EXPAND (w9_t, w4_t, wc_t, wb_t); \ + wc_t = SHA256_EXPAND (wa_t, w5_t, wd_t, wc_t); \ + wd_t = SHA256_EXPAND (wb_t, w6_t, we_t, wd_t); \ + we_t = SHA256_EXPAND (wc_t, w7_t, wf_t, we_t); \ + wf_t = SHA256_EXPAND (wd_t, w8_t, w0_t, wf_t); \ + } + + #define ROUND_STEP(i) \ + { \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, a, b, c, d, e, f, g, h, w0_t, k_sha256[i + 0]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, h, a, b, c, d, e, f, g, w1_t, k_sha256[i + 1]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, g, h, a, b, c, d, e, f, w2_t, k_sha256[i + 2]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, f, g, h, a, b, c, d, e, w3_t, k_sha256[i + 3]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, e, f, g, h, a, b, c, d, w4_t, k_sha256[i + 4]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, d, e, f, g, h, a, b, c, w5_t, k_sha256[i + 5]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, c, d, e, f, g, h, a, b, w6_t, k_sha256[i + 6]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, b, c, d, e, f, g, h, a, w7_t, k_sha256[i + 7]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, a, b, c, d, e, f, g, h, w8_t, k_sha256[i + 8]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, h, a, b, c, d, e, f, g, w9_t, k_sha256[i + 9]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, g, h, a, b, c, d, e, f, wa_t, k_sha256[i + 10]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, f, g, h, a, b, c, d, e, wb_t, k_sha256[i + 11]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, e, f, g, h, a, b, c, d, wc_t, k_sha256[i + 12]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, d, e, f, g, h, a, b, c, wd_t, k_sha256[i + 13]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, c, d, e, f, g, h, a, b, we_t, k_sha256[i + 14]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, b, c, d, e, f, g, h, a, wf_t, k_sha256[i + 15]); \ + } + + ROUND_STEP (0); + + #ifdef _unroll + #pragma unroll + #endif + for (int i = 16; i < 64; i += 16) + { + ROUND_EXPAND (); ROUND_STEP (i); + } + + digest[0] += a; + digest[1] += b; + digest[2] += c; + digest[3] += d; + digest[4] += e; + digest[5] += f; + digest[6] += g; + digest[7] += h; +} + +void hmac_sha256_pad (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 ipad[8], u32 opad[8]) +{ + w0[0] = w0[0] ^ 0x36363636; + w0[1] = w0[1] ^ 0x36363636; + w0[2] = w0[2] ^ 0x36363636; + w0[3] = w0[3] ^ 0x36363636; + w1[0] = w1[0] ^ 0x36363636; + w1[1] = w1[1] ^ 0x36363636; + w1[2] = w1[2] ^ 0x36363636; + w1[3] = w1[3] ^ 0x36363636; + w2[0] = w2[0] ^ 0x36363636; + w2[1] = w2[1] ^ 0x36363636; + w2[2] = w2[2] ^ 0x36363636; + w2[3] = w2[3] ^ 0x36363636; + w3[0] = w3[0] ^ 0x36363636; + w3[1] = w3[1] ^ 0x36363636; + w3[2] = w3[2] ^ 0x36363636; + w3[3] = w3[3] ^ 0x36363636; + + ipad[0] = SHA256M_A; + ipad[1] = SHA256M_B; + ipad[2] = SHA256M_C; + ipad[3] = SHA256M_D; + ipad[4] = SHA256M_E; + ipad[5] = SHA256M_F; + ipad[6] = SHA256M_G; + ipad[7] = SHA256M_H; + + sha256_transform (w0, w1, w2, w3, ipad); + + w0[0] = w0[0] ^ 0x6a6a6a6a; + w0[1] = w0[1] ^ 0x6a6a6a6a; + w0[2] = w0[2] ^ 0x6a6a6a6a; + w0[3] = w0[3] ^ 0x6a6a6a6a; + w1[0] = w1[0] ^ 0x6a6a6a6a; + w1[1] = w1[1] ^ 0x6a6a6a6a; + w1[2] = w1[2] ^ 0x6a6a6a6a; + w1[3] = w1[3] ^ 0x6a6a6a6a; + w2[0] = w2[0] ^ 0x6a6a6a6a; + w2[1] = w2[1] ^ 0x6a6a6a6a; + w2[2] = w2[2] ^ 0x6a6a6a6a; + w2[3] = w2[3] ^ 0x6a6a6a6a; + w3[0] = w3[0] ^ 0x6a6a6a6a; + w3[1] = w3[1] ^ 0x6a6a6a6a; + w3[2] = w3[2] ^ 0x6a6a6a6a; + w3[3] = w3[3] ^ 0x6a6a6a6a; + + opad[0] = SHA256M_A; + opad[1] = SHA256M_B; + opad[2] = SHA256M_C; + opad[3] = SHA256M_D; + opad[4] = SHA256M_E; + opad[5] = SHA256M_F; + opad[6] = SHA256M_G; + opad[7] = SHA256M_H; + + sha256_transform (w0, w1, w2, w3, opad); +} + +void hmac_sha256_run (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 ipad[8], u32 opad[8], u32 digest[8]) +{ + digest[0] = ipad[0]; + digest[1] = ipad[1]; + digest[2] = ipad[2]; + digest[3] = ipad[3]; + digest[4] = ipad[4]; + digest[5] = ipad[5]; + digest[6] = ipad[6]; + digest[7] = ipad[7]; + + sha256_transform (w0, w1, w2, w3, digest); + + w0[0] = digest[0]; + w0[1] = digest[1]; + w0[2] = digest[2]; + w0[3] = digest[3]; + w1[0] = digest[4]; + w1[1] = digest[5]; + w1[2] = digest[6]; + w1[3] = digest[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + digest[0] = opad[0]; + digest[1] = opad[1]; + digest[2] = opad[2]; + digest[3] = opad[3]; + digest[4] = opad[4]; + digest[5] = opad[5]; + digest[6] = opad[6]; + digest[7] = opad[7]; + + sha256_transform (w0, w1, w2, w3, digest); +} + +void hmac_sha256_run2 (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 w4[4], u32 w5[4], u32 w6[4], u32 w7[4], u32 ipad[8], u32 opad[8], u32 digest[8]) +{ + digest[0] = ipad[0]; + digest[1] = ipad[1]; + digest[2] = ipad[2]; + digest[3] = ipad[3]; + digest[4] = ipad[4]; + digest[5] = ipad[5]; + digest[6] = ipad[6]; + digest[7] = ipad[7]; + + sha256_transform (w0, w1, w2, w3, digest); + sha256_transform (w4, w5, w6, w7, digest); + + w0[0] = digest[0]; + w0[1] = digest[1]; + w0[2] = digest[2]; + w0[3] = digest[3]; + w1[0] = digest[4]; + w1[1] = digest[5]; + w1[2] = digest[6]; + w1[3] = digest[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + digest[0] = opad[0]; + digest[1] = opad[1]; + digest[2] = opad[2]; + digest[3] = opad[3]; + digest[4] = opad[4]; + digest[5] = opad[5]; + digest[6] = opad[6]; + digest[7] = opad[7]; + + sha256_transform (w0, w1, w2, w3, digest); +} + +u32 u8add (const u32 a, const u32 b) +{ + const u32 a1 = (a >> 0) & 0xff; + const u32 a2 = (a >> 8) & 0xff; + const u32 a3 = (a >> 16) & 0xff; + const u32 a4 = (a >> 24) & 0xff; + + const u32 b1 = (b >> 0) & 0xff; + const u32 b2 = (b >> 8) & 0xff; + const u32 b3 = (b >> 16) & 0xff; + const u32 b4 = (b >> 24) & 0xff; + + const u32 r1 = (a1 + b1) & 0xff; + const u32 r2 = (a2 + b2) & 0xff; + const u32 r3 = (a3 + b3) & 0xff; + const u32 r4 = (a4 + b4) & 0xff; + + const u32 r = r1 << 0 + | r2 << 8 + | r3 << 16 + | r4 << 24; + + return r; +} + +__kernel void m13752_init (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + /** + * base + */ + + const u32 gid = get_global_id (0); + + if (gid >= gid_max) return; + + u32 w0[4]; + u32 w1[4]; + u32 w2[4]; + u32 w3[4]; + + w0[0] = pws[gid].i[ 0]; + w0[1] = pws[gid].i[ 1]; + w0[2] = pws[gid].i[ 2]; + w0[3] = pws[gid].i[ 3]; + w1[0] = pws[gid].i[ 4]; + w1[1] = pws[gid].i[ 5]; + w1[2] = pws[gid].i[ 6]; + w1[3] = pws[gid].i[ 7]; + w2[0] = pws[gid].i[ 8]; + w2[1] = pws[gid].i[ 9]; + w2[2] = pws[gid].i[10]; + w2[3] = pws[gid].i[11]; + w3[0] = pws[gid].i[12]; + w3[1] = pws[gid].i[13]; + w3[2] = pws[gid].i[14]; + w3[3] = pws[gid].i[15]; + + /** + * keyfile + */ + + w0[0] = u8add (w0[0], esalt_bufs[salt_pos].keyfile_buf[ 0]); + w0[1] = u8add (w0[1], esalt_bufs[salt_pos].keyfile_buf[ 1]); + w0[2] = u8add (w0[2], esalt_bufs[salt_pos].keyfile_buf[ 2]); + w0[3] = u8add (w0[3], esalt_bufs[salt_pos].keyfile_buf[ 3]); + w1[0] = u8add (w1[0], esalt_bufs[salt_pos].keyfile_buf[ 4]); + w1[1] = u8add (w1[1], esalt_bufs[salt_pos].keyfile_buf[ 5]); + w1[2] = u8add (w1[2], esalt_bufs[salt_pos].keyfile_buf[ 6]); + w1[3] = u8add (w1[3], esalt_bufs[salt_pos].keyfile_buf[ 7]); + w2[0] = u8add (w2[0], esalt_bufs[salt_pos].keyfile_buf[ 8]); + w2[1] = u8add (w2[1], esalt_bufs[salt_pos].keyfile_buf[ 9]); + w2[2] = u8add (w2[2], esalt_bufs[salt_pos].keyfile_buf[10]); + w2[3] = u8add (w2[3], esalt_bufs[salt_pos].keyfile_buf[11]); + w3[0] = u8add (w3[0], esalt_bufs[salt_pos].keyfile_buf[12]); + w3[1] = u8add (w3[1], esalt_bufs[salt_pos].keyfile_buf[13]); + w3[2] = u8add (w3[2], esalt_bufs[salt_pos].keyfile_buf[14]); + w3[3] = u8add (w3[3], esalt_bufs[salt_pos].keyfile_buf[15]); + + w0[0] = swap32 (w0[0]); + w0[1] = swap32 (w0[1]); + w0[2] = swap32 (w0[2]); + w0[3] = swap32 (w0[3]); + w1[0] = swap32 (w1[0]); + w1[1] = swap32 (w1[1]); + w1[2] = swap32 (w1[2]); + w1[3] = swap32 (w1[3]); + w2[0] = swap32 (w2[0]); + w2[1] = swap32 (w2[1]); + w2[2] = swap32 (w2[2]); + w2[3] = swap32 (w2[3]); + w3[0] = swap32 (w3[0]); + w3[1] = swap32 (w3[1]); + w3[2] = swap32 (w3[2]); + w3[3] = swap32 (w3[3]); + + /** + * salt + */ + + u32 s0[4]; + u32 s1[4]; + u32 s2[4]; + u32 s3[4]; + u32 s4[4]; + u32 s5[4]; + u32 s6[4]; + u32 s7[4]; + + s0[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 0]); + s0[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 1]); + s0[2] = swap32 (esalt_bufs[salt_pos].salt_buf[ 2]); + s0[3] = swap32 (esalt_bufs[salt_pos].salt_buf[ 3]); + s1[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 4]); + s1[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 5]); + s1[2] = swap32 (esalt_bufs[salt_pos].salt_buf[ 6]); + s1[3] = swap32 (esalt_bufs[salt_pos].salt_buf[ 7]); + s2[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 8]); + s2[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 9]); + s2[2] = swap32 (esalt_bufs[salt_pos].salt_buf[10]); + s2[3] = swap32 (esalt_bufs[salt_pos].salt_buf[11]); + s3[0] = swap32 (esalt_bufs[salt_pos].salt_buf[12]); + s3[1] = swap32 (esalt_bufs[salt_pos].salt_buf[13]); + s3[2] = swap32 (esalt_bufs[salt_pos].salt_buf[14]); + s3[3] = swap32 (esalt_bufs[salt_pos].salt_buf[15]); + s4[0] = 0; + s4[1] = 0x80000000; + s4[2] = 0; + s4[3] = 0; + s5[0] = 0; + s5[1] = 0; + s5[2] = 0; + s5[3] = 0; + s6[0] = 0; + s6[1] = 0; + s6[2] = 0; + s6[3] = 0; + s7[0] = 0; + s7[1] = 0; + s7[2] = 0; + s7[3] = (64 + 64 + 4) * 8; + + const u32 truecrypt_mdlen = salt_bufs[0].truecrypt_mdlen; + + u32 ipad[8]; + u32 opad[8]; + + hmac_sha256_pad (w0, w1, w2, w3, ipad, opad); + + tmps[gid].ipad[0] = ipad[0]; + tmps[gid].ipad[1] = ipad[1]; + tmps[gid].ipad[2] = ipad[2]; + tmps[gid].ipad[3] = ipad[3]; + tmps[gid].ipad[4] = ipad[4]; + tmps[gid].ipad[5] = ipad[5]; + tmps[gid].ipad[6] = ipad[6]; + tmps[gid].ipad[7] = ipad[7]; + + tmps[gid].opad[0] = opad[0]; + tmps[gid].opad[1] = opad[1]; + tmps[gid].opad[2] = opad[2]; + tmps[gid].opad[3] = opad[3]; + tmps[gid].opad[4] = opad[4]; + tmps[gid].opad[5] = opad[5]; + tmps[gid].opad[6] = opad[6]; + tmps[gid].opad[7] = opad[7]; + + for (u32 i = 0, j = 1; i < ((truecrypt_mdlen / 8) / 4); i += 8, j += 1) + { + s4[0] = j; + + u32 dgst[8]; + + hmac_sha256_run2 (s0, s1, s2, s3, s4, s5, s6, s7, ipad, opad, dgst); + + tmps[gid].dgst[i + 0] = dgst[0]; + tmps[gid].dgst[i + 1] = dgst[1]; + tmps[gid].dgst[i + 2] = dgst[2]; + tmps[gid].dgst[i + 3] = dgst[3]; + tmps[gid].dgst[i + 4] = dgst[4]; + tmps[gid].dgst[i + 5] = dgst[5]; + tmps[gid].dgst[i + 6] = dgst[6]; + tmps[gid].dgst[i + 7] = dgst[7]; + + tmps[gid].out[i + 0] = dgst[0]; + tmps[gid].out[i + 1] = dgst[1]; + tmps[gid].out[i + 2] = dgst[2]; + tmps[gid].out[i + 3] = dgst[3]; + tmps[gid].out[i + 4] = dgst[4]; + tmps[gid].out[i + 5] = dgst[5]; + tmps[gid].out[i + 6] = dgst[6]; + tmps[gid].out[i + 7] = dgst[7]; + } +} + +__kernel void m13752_loop (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + const u32 truecrypt_mdlen = salt_bufs[0].truecrypt_mdlen; + + const u32 gid = get_global_id (0); + + if (gid >= gid_max) return; + + u32 ipad[8]; + + ipad[0] = tmps[gid].ipad[0]; + ipad[1] = tmps[gid].ipad[1]; + ipad[2] = tmps[gid].ipad[2]; + ipad[3] = tmps[gid].ipad[3]; + ipad[4] = tmps[gid].ipad[4]; + ipad[5] = tmps[gid].ipad[5]; + ipad[6] = tmps[gid].ipad[6]; + ipad[7] = tmps[gid].ipad[7]; + + u32 opad[8]; + + opad[0] = tmps[gid].opad[0]; + opad[1] = tmps[gid].opad[1]; + opad[2] = tmps[gid].opad[2]; + opad[3] = tmps[gid].opad[3]; + opad[4] = tmps[gid].opad[4]; + opad[5] = tmps[gid].opad[5]; + opad[6] = tmps[gid].opad[6]; + opad[7] = tmps[gid].opad[7]; + + for (u32 i = 0; i < ((truecrypt_mdlen / 8) / 4); i += 8) + { + u32 dgst[8]; + + dgst[0] = tmps[gid].dgst[i + 0]; + dgst[1] = tmps[gid].dgst[i + 1]; + dgst[2] = tmps[gid].dgst[i + 2]; + dgst[3] = tmps[gid].dgst[i + 3]; + dgst[4] = tmps[gid].dgst[i + 4]; + dgst[5] = tmps[gid].dgst[i + 5]; + dgst[6] = tmps[gid].dgst[i + 6]; + dgst[7] = tmps[gid].dgst[i + 7]; + + u32 out[8]; + + out[0] = tmps[gid].out[i + 0]; + out[1] = tmps[gid].out[i + 1]; + out[2] = tmps[gid].out[i + 2]; + out[3] = tmps[gid].out[i + 3]; + out[4] = tmps[gid].out[i + 4]; + out[5] = tmps[gid].out[i + 5]; + out[6] = tmps[gid].out[i + 6]; + out[7] = tmps[gid].out[i + 7]; + + for (u32 j = 0; j < loop_cnt; j++) + { + u32 w0[4]; + u32 w1[4]; + u32 w2[4]; + u32 w3[4]; + + w0[0] = dgst[0]; + w0[1] = dgst[1]; + w0[2] = dgst[2]; + w0[3] = dgst[3]; + w1[0] = dgst[4]; + w1[1] = dgst[5]; + w1[2] = dgst[6]; + w1[3] = dgst[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + hmac_sha256_run (w0, w1, w2, w3, ipad, opad, dgst); + + out[0] ^= dgst[0]; + out[1] ^= dgst[1]; + out[2] ^= dgst[2]; + out[3] ^= dgst[3]; + out[4] ^= dgst[4]; + out[5] ^= dgst[5]; + out[6] ^= dgst[6]; + out[7] ^= dgst[7]; + } + + tmps[gid].dgst[i + 0] = dgst[0]; + tmps[gid].dgst[i + 1] = dgst[1]; + tmps[gid].dgst[i + 2] = dgst[2]; + tmps[gid].dgst[i + 3] = dgst[3]; + tmps[gid].dgst[i + 4] = dgst[4]; + tmps[gid].dgst[i + 5] = dgst[5]; + tmps[gid].dgst[i + 6] = dgst[6]; + tmps[gid].dgst[i + 7] = dgst[7]; + + tmps[gid].out[i + 0] = out[0]; + tmps[gid].out[i + 1] = out[1]; + tmps[gid].out[i + 2] = out[2]; + tmps[gid].out[i + 3] = out[3]; + tmps[gid].out[i + 4] = out[4]; + tmps[gid].out[i + 5] = out[5]; + tmps[gid].out[i + 6] = out[6]; + tmps[gid].out[i + 7] = out[7]; + } +} + +__kernel void m13752_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + /** + * base + */ + + const u32 gid = get_global_id (0); + const u32 lid = get_local_id (0); + + if (gid >= gid_max) return; + + u32 ukey1[8]; + + ukey1[0] = swap32 (tmps[gid].out[ 0]); + ukey1[1] = swap32 (tmps[gid].out[ 1]); + ukey1[2] = swap32 (tmps[gid].out[ 2]); + ukey1[3] = swap32 (tmps[gid].out[ 3]); + ukey1[4] = swap32 (tmps[gid].out[ 4]); + ukey1[5] = swap32 (tmps[gid].out[ 5]); + ukey1[6] = swap32 (tmps[gid].out[ 6]); + ukey1[7] = swap32 (tmps[gid].out[ 7]); + + u32 ukey2[8]; + + ukey2[0] = swap32 (tmps[gid].out[ 8]); + ukey2[1] = swap32 (tmps[gid].out[ 9]); + ukey2[2] = swap32 (tmps[gid].out[10]); + ukey2[3] = swap32 (tmps[gid].out[11]); + ukey2[4] = swap32 (tmps[gid].out[12]); + ukey2[5] = swap32 (tmps[gid].out[13]); + ukey2[6] = swap32 (tmps[gid].out[14]); + ukey2[7] = swap32 (tmps[gid].out[15]); + + u32 data[4]; + + data[0] = esalt_bufs[0].data_buf[0]; + data[1] = esalt_bufs[0].data_buf[1]; + data[2] = esalt_bufs[0].data_buf[2]; + data[3] = esalt_bufs[0].data_buf[3]; + + const u32 signature = esalt_bufs[0].signature; + + u32 tmp[4]; + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + aes256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + serpent256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + twofish256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + u32 ukey3[8]; + + ukey3[0] = tmps[gid].out[16]; + ukey3[1] = tmps[gid].out[17]; + ukey3[2] = tmps[gid].out[18]; + ukey3[3] = tmps[gid].out[19]; + ukey3[4] = tmps[gid].out[20]; + ukey3[5] = tmps[gid].out[21]; + ukey3[6] = tmps[gid].out[22]; + ukey3[7] = tmps[gid].out[23]; + + u32 ukey4[8]; + + ukey4[0] = tmps[gid].out[24]; + ukey4[1] = tmps[gid].out[25]; + ukey4[2] = tmps[gid].out[26]; + ukey4[3] = tmps[gid].out[27]; + ukey4[4] = tmps[gid].out[28]; + ukey4[5] = tmps[gid].out[29]; + ukey4[6] = tmps[gid].out[30]; + ukey4[7] = tmps[gid].out[31]; + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + aes256_decrypt_xts (ukey2, ukey4, tmp, tmp); + twofish256_decrypt_xts (ukey1, ukey3, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + serpent256_decrypt_xts (ukey2, ukey4, tmp, tmp); + aes256_decrypt_xts (ukey1, ukey3, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + twofish256_decrypt_xts (ukey2, ukey4, tmp, tmp); + serpent256_decrypt_xts (ukey1, ukey3, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } +} diff --git a/OpenCL/m13753.cl b/OpenCL/m13753.cl new file mode 100644 index 0000000..83f54cd --- /dev/null +++ b/OpenCL/m13753.cl @@ -0,0 +1,786 @@ +/** + * Author......: Jens Steube + * License.....: MIT + */ + +#define _SHA256_ + +#include "include/constants.h" +#include "include/kernel_vendor.h" + +#define DGST_R0 0 +#define DGST_R1 1 +#define DGST_R2 2 +#define DGST_R3 3 + +#include "include/kernel_functions.c" +#include "OpenCL/types_ocl.c" +#include "OpenCL/common.c" + +#include "OpenCL/kernel_aes256.c" +#include "OpenCL/kernel_twofish256.c" +#include "OpenCL/kernel_serpent256.c" + +__constant u32 k_sha256[64] = +{ + SHA256C00, SHA256C01, SHA256C02, SHA256C03, + SHA256C04, SHA256C05, SHA256C06, SHA256C07, + SHA256C08, SHA256C09, SHA256C0a, SHA256C0b, + SHA256C0c, SHA256C0d, SHA256C0e, SHA256C0f, + SHA256C10, SHA256C11, SHA256C12, SHA256C13, + SHA256C14, SHA256C15, SHA256C16, SHA256C17, + SHA256C18, SHA256C19, SHA256C1a, SHA256C1b, + SHA256C1c, SHA256C1d, SHA256C1e, SHA256C1f, + SHA256C20, SHA256C21, SHA256C22, SHA256C23, + SHA256C24, SHA256C25, SHA256C26, SHA256C27, + SHA256C28, SHA256C29, SHA256C2a, SHA256C2b, + SHA256C2c, SHA256C2d, SHA256C2e, SHA256C2f, + SHA256C30, SHA256C31, SHA256C32, SHA256C33, + SHA256C34, SHA256C35, SHA256C36, SHA256C37, + SHA256C38, SHA256C39, SHA256C3a, SHA256C3b, + SHA256C3c, SHA256C3d, SHA256C3e, SHA256C3f, +}; + +void sha256_transform (const u32 w0[4], const u32 w1[4], const u32 w2[4], const u32 w3[4], u32 digest[8]) +{ + u32 a = digest[0]; + u32 b = digest[1]; + u32 c = digest[2]; + u32 d = digest[3]; + u32 e = digest[4]; + u32 f = digest[5]; + u32 g = digest[6]; + u32 h = digest[7]; + + u32 w0_t = w0[0]; + u32 w1_t = w0[1]; + u32 w2_t = w0[2]; + u32 w3_t = w0[3]; + u32 w4_t = w1[0]; + u32 w5_t = w1[1]; + u32 w6_t = w1[2]; + u32 w7_t = w1[3]; + u32 w8_t = w2[0]; + u32 w9_t = w2[1]; + u32 wa_t = w2[2]; + u32 wb_t = w2[3]; + u32 wc_t = w3[0]; + u32 wd_t = w3[1]; + u32 we_t = w3[2]; + u32 wf_t = w3[3]; + + #define ROUND_EXPAND() \ + { \ + w0_t = SHA256_EXPAND (we_t, w9_t, w1_t, w0_t); \ + w1_t = SHA256_EXPAND (wf_t, wa_t, w2_t, w1_t); \ + w2_t = SHA256_EXPAND (w0_t, wb_t, w3_t, w2_t); \ + w3_t = SHA256_EXPAND (w1_t, wc_t, w4_t, w3_t); \ + w4_t = SHA256_EXPAND (w2_t, wd_t, w5_t, w4_t); \ + w5_t = SHA256_EXPAND (w3_t, we_t, w6_t, w5_t); \ + w6_t = SHA256_EXPAND (w4_t, wf_t, w7_t, w6_t); \ + w7_t = SHA256_EXPAND (w5_t, w0_t, w8_t, w7_t); \ + w8_t = SHA256_EXPAND (w6_t, w1_t, w9_t, w8_t); \ + w9_t = SHA256_EXPAND (w7_t, w2_t, wa_t, w9_t); \ + wa_t = SHA256_EXPAND (w8_t, w3_t, wb_t, wa_t); \ + wb_t = SHA256_EXPAND (w9_t, w4_t, wc_t, wb_t); \ + wc_t = SHA256_EXPAND (wa_t, w5_t, wd_t, wc_t); \ + wd_t = SHA256_EXPAND (wb_t, w6_t, we_t, wd_t); \ + we_t = SHA256_EXPAND (wc_t, w7_t, wf_t, we_t); \ + wf_t = SHA256_EXPAND (wd_t, w8_t, w0_t, wf_t); \ + } + + #define ROUND_STEP(i) \ + { \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, a, b, c, d, e, f, g, h, w0_t, k_sha256[i + 0]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, h, a, b, c, d, e, f, g, w1_t, k_sha256[i + 1]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, g, h, a, b, c, d, e, f, w2_t, k_sha256[i + 2]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, f, g, h, a, b, c, d, e, w3_t, k_sha256[i + 3]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, e, f, g, h, a, b, c, d, w4_t, k_sha256[i + 4]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, d, e, f, g, h, a, b, c, w5_t, k_sha256[i + 5]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, c, d, e, f, g, h, a, b, w6_t, k_sha256[i + 6]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, b, c, d, e, f, g, h, a, w7_t, k_sha256[i + 7]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, a, b, c, d, e, f, g, h, w8_t, k_sha256[i + 8]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, h, a, b, c, d, e, f, g, w9_t, k_sha256[i + 9]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, g, h, a, b, c, d, e, f, wa_t, k_sha256[i + 10]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, f, g, h, a, b, c, d, e, wb_t, k_sha256[i + 11]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, e, f, g, h, a, b, c, d, wc_t, k_sha256[i + 12]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, d, e, f, g, h, a, b, c, wd_t, k_sha256[i + 13]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, c, d, e, f, g, h, a, b, we_t, k_sha256[i + 14]); \ + SHA256_STEP (SHA256_F0o, SHA256_F1o, b, c, d, e, f, g, h, a, wf_t, k_sha256[i + 15]); \ + } + + ROUND_STEP (0); + + #ifdef _unroll + #pragma unroll + #endif + for (int i = 16; i < 64; i += 16) + { + ROUND_EXPAND (); ROUND_STEP (i); + } + + digest[0] += a; + digest[1] += b; + digest[2] += c; + digest[3] += d; + digest[4] += e; + digest[5] += f; + digest[6] += g; + digest[7] += h; +} + +void hmac_sha256_pad (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 ipad[8], u32 opad[8]) +{ + w0[0] = w0[0] ^ 0x36363636; + w0[1] = w0[1] ^ 0x36363636; + w0[2] = w0[2] ^ 0x36363636; + w0[3] = w0[3] ^ 0x36363636; + w1[0] = w1[0] ^ 0x36363636; + w1[1] = w1[1] ^ 0x36363636; + w1[2] = w1[2] ^ 0x36363636; + w1[3] = w1[3] ^ 0x36363636; + w2[0] = w2[0] ^ 0x36363636; + w2[1] = w2[1] ^ 0x36363636; + w2[2] = w2[2] ^ 0x36363636; + w2[3] = w2[3] ^ 0x36363636; + w3[0] = w3[0] ^ 0x36363636; + w3[1] = w3[1] ^ 0x36363636; + w3[2] = w3[2] ^ 0x36363636; + w3[3] = w3[3] ^ 0x36363636; + + ipad[0] = SHA256M_A; + ipad[1] = SHA256M_B; + ipad[2] = SHA256M_C; + ipad[3] = SHA256M_D; + ipad[4] = SHA256M_E; + ipad[5] = SHA256M_F; + ipad[6] = SHA256M_G; + ipad[7] = SHA256M_H; + + sha256_transform (w0, w1, w2, w3, ipad); + + w0[0] = w0[0] ^ 0x6a6a6a6a; + w0[1] = w0[1] ^ 0x6a6a6a6a; + w0[2] = w0[2] ^ 0x6a6a6a6a; + w0[3] = w0[3] ^ 0x6a6a6a6a; + w1[0] = w1[0] ^ 0x6a6a6a6a; + w1[1] = w1[1] ^ 0x6a6a6a6a; + w1[2] = w1[2] ^ 0x6a6a6a6a; + w1[3] = w1[3] ^ 0x6a6a6a6a; + w2[0] = w2[0] ^ 0x6a6a6a6a; + w2[1] = w2[1] ^ 0x6a6a6a6a; + w2[2] = w2[2] ^ 0x6a6a6a6a; + w2[3] = w2[3] ^ 0x6a6a6a6a; + w3[0] = w3[0] ^ 0x6a6a6a6a; + w3[1] = w3[1] ^ 0x6a6a6a6a; + w3[2] = w3[2] ^ 0x6a6a6a6a; + w3[3] = w3[3] ^ 0x6a6a6a6a; + + opad[0] = SHA256M_A; + opad[1] = SHA256M_B; + opad[2] = SHA256M_C; + opad[3] = SHA256M_D; + opad[4] = SHA256M_E; + opad[5] = SHA256M_F; + opad[6] = SHA256M_G; + opad[7] = SHA256M_H; + + sha256_transform (w0, w1, w2, w3, opad); +} + +void hmac_sha256_run (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 ipad[8], u32 opad[8], u32 digest[8]) +{ + digest[0] = ipad[0]; + digest[1] = ipad[1]; + digest[2] = ipad[2]; + digest[3] = ipad[3]; + digest[4] = ipad[4]; + digest[5] = ipad[5]; + digest[6] = ipad[6]; + digest[7] = ipad[7]; + + sha256_transform (w0, w1, w2, w3, digest); + + w0[0] = digest[0]; + w0[1] = digest[1]; + w0[2] = digest[2]; + w0[3] = digest[3]; + w1[0] = digest[4]; + w1[1] = digest[5]; + w1[2] = digest[6]; + w1[3] = digest[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + digest[0] = opad[0]; + digest[1] = opad[1]; + digest[2] = opad[2]; + digest[3] = opad[3]; + digest[4] = opad[4]; + digest[5] = opad[5]; + digest[6] = opad[6]; + digest[7] = opad[7]; + + sha256_transform (w0, w1, w2, w3, digest); +} + +void hmac_sha256_run2 (u32 w0[4], u32 w1[4], u32 w2[4], u32 w3[4], u32 w4[4], u32 w5[4], u32 w6[4], u32 w7[4], u32 ipad[8], u32 opad[8], u32 digest[8]) +{ + digest[0] = ipad[0]; + digest[1] = ipad[1]; + digest[2] = ipad[2]; + digest[3] = ipad[3]; + digest[4] = ipad[4]; + digest[5] = ipad[5]; + digest[6] = ipad[6]; + digest[7] = ipad[7]; + + sha256_transform (w0, w1, w2, w3, digest); + sha256_transform (w4, w5, w6, w7, digest); + + w0[0] = digest[0]; + w0[1] = digest[1]; + w0[2] = digest[2]; + w0[3] = digest[3]; + w1[0] = digest[4]; + w1[1] = digest[5]; + w1[2] = digest[6]; + w1[3] = digest[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + digest[0] = opad[0]; + digest[1] = opad[1]; + digest[2] = opad[2]; + digest[3] = opad[3]; + digest[4] = opad[4]; + digest[5] = opad[5]; + digest[6] = opad[6]; + digest[7] = opad[7]; + + sha256_transform (w0, w1, w2, w3, digest); +} + +u32 u8add (const u32 a, const u32 b) +{ + const u32 a1 = (a >> 0) & 0xff; + const u32 a2 = (a >> 8) & 0xff; + const u32 a3 = (a >> 16) & 0xff; + const u32 a4 = (a >> 24) & 0xff; + + const u32 b1 = (b >> 0) & 0xff; + const u32 b2 = (b >> 8) & 0xff; + const u32 b3 = (b >> 16) & 0xff; + const u32 b4 = (b >> 24) & 0xff; + + const u32 r1 = (a1 + b1) & 0xff; + const u32 r2 = (a2 + b2) & 0xff; + const u32 r3 = (a3 + b3) & 0xff; + const u32 r4 = (a4 + b4) & 0xff; + + const u32 r = r1 << 0 + | r2 << 8 + | r3 << 16 + | r4 << 24; + + return r; +} + +__kernel void m13753_init (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + /** + * base + */ + + const u32 gid = get_global_id (0); + + if (gid >= gid_max) return; + + u32 w0[4]; + u32 w1[4]; + u32 w2[4]; + u32 w3[4]; + + w0[0] = pws[gid].i[ 0]; + w0[1] = pws[gid].i[ 1]; + w0[2] = pws[gid].i[ 2]; + w0[3] = pws[gid].i[ 3]; + w1[0] = pws[gid].i[ 4]; + w1[1] = pws[gid].i[ 5]; + w1[2] = pws[gid].i[ 6]; + w1[3] = pws[gid].i[ 7]; + w2[0] = pws[gid].i[ 8]; + w2[1] = pws[gid].i[ 9]; + w2[2] = pws[gid].i[10]; + w2[3] = pws[gid].i[11]; + w3[0] = pws[gid].i[12]; + w3[1] = pws[gid].i[13]; + w3[2] = pws[gid].i[14]; + w3[3] = pws[gid].i[15]; + + /** + * keyfile + */ + + w0[0] = u8add (w0[0], esalt_bufs[salt_pos].keyfile_buf[ 0]); + w0[1] = u8add (w0[1], esalt_bufs[salt_pos].keyfile_buf[ 1]); + w0[2] = u8add (w0[2], esalt_bufs[salt_pos].keyfile_buf[ 2]); + w0[3] = u8add (w0[3], esalt_bufs[salt_pos].keyfile_buf[ 3]); + w1[0] = u8add (w1[0], esalt_bufs[salt_pos].keyfile_buf[ 4]); + w1[1] = u8add (w1[1], esalt_bufs[salt_pos].keyfile_buf[ 5]); + w1[2] = u8add (w1[2], esalt_bufs[salt_pos].keyfile_buf[ 6]); + w1[3] = u8add (w1[3], esalt_bufs[salt_pos].keyfile_buf[ 7]); + w2[0] = u8add (w2[0], esalt_bufs[salt_pos].keyfile_buf[ 8]); + w2[1] = u8add (w2[1], esalt_bufs[salt_pos].keyfile_buf[ 9]); + w2[2] = u8add (w2[2], esalt_bufs[salt_pos].keyfile_buf[10]); + w2[3] = u8add (w2[3], esalt_bufs[salt_pos].keyfile_buf[11]); + w3[0] = u8add (w3[0], esalt_bufs[salt_pos].keyfile_buf[12]); + w3[1] = u8add (w3[1], esalt_bufs[salt_pos].keyfile_buf[13]); + w3[2] = u8add (w3[2], esalt_bufs[salt_pos].keyfile_buf[14]); + w3[3] = u8add (w3[3], esalt_bufs[salt_pos].keyfile_buf[15]); + + w0[0] = swap32 (w0[0]); + w0[1] = swap32 (w0[1]); + w0[2] = swap32 (w0[2]); + w0[3] = swap32 (w0[3]); + w1[0] = swap32 (w1[0]); + w1[1] = swap32 (w1[1]); + w1[2] = swap32 (w1[2]); + w1[3] = swap32 (w1[3]); + w2[0] = swap32 (w2[0]); + w2[1] = swap32 (w2[1]); + w2[2] = swap32 (w2[2]); + w2[3] = swap32 (w2[3]); + w3[0] = swap32 (w3[0]); + w3[1] = swap32 (w3[1]); + w3[2] = swap32 (w3[2]); + w3[3] = swap32 (w3[3]); + + /** + * salt + */ + + u32 s0[4]; + u32 s1[4]; + u32 s2[4]; + u32 s3[4]; + u32 s4[4]; + u32 s5[4]; + u32 s6[4]; + u32 s7[4]; + + s0[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 0]); + s0[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 1]); + s0[2] = swap32 (esalt_bufs[salt_pos].salt_buf[ 2]); + s0[3] = swap32 (esalt_bufs[salt_pos].salt_buf[ 3]); + s1[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 4]); + s1[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 5]); + s1[2] = swap32 (esalt_bufs[salt_pos].salt_buf[ 6]); + s1[3] = swap32 (esalt_bufs[salt_pos].salt_buf[ 7]); + s2[0] = swap32 (esalt_bufs[salt_pos].salt_buf[ 8]); + s2[1] = swap32 (esalt_bufs[salt_pos].salt_buf[ 9]); + s2[2] = swap32 (esalt_bufs[salt_pos].salt_buf[10]); + s2[3] = swap32 (esalt_bufs[salt_pos].salt_buf[11]); + s3[0] = swap32 (esalt_bufs[salt_pos].salt_buf[12]); + s3[1] = swap32 (esalt_bufs[salt_pos].salt_buf[13]); + s3[2] = swap32 (esalt_bufs[salt_pos].salt_buf[14]); + s3[3] = swap32 (esalt_bufs[salt_pos].salt_buf[15]); + s4[0] = 0; + s4[1] = 0x80000000; + s4[2] = 0; + s4[3] = 0; + s5[0] = 0; + s5[1] = 0; + s5[2] = 0; + s5[3] = 0; + s6[0] = 0; + s6[1] = 0; + s6[2] = 0; + s6[3] = 0; + s7[0] = 0; + s7[1] = 0; + s7[2] = 0; + s7[3] = (64 + 64 + 4) * 8; + + const u32 truecrypt_mdlen = salt_bufs[0].truecrypt_mdlen; + + u32 ipad[8]; + u32 opad[8]; + + hmac_sha256_pad (w0, w1, w2, w3, ipad, opad); + + tmps[gid].ipad[0] = ipad[0]; + tmps[gid].ipad[1] = ipad[1]; + tmps[gid].ipad[2] = ipad[2]; + tmps[gid].ipad[3] = ipad[3]; + tmps[gid].ipad[4] = ipad[4]; + tmps[gid].ipad[5] = ipad[5]; + tmps[gid].ipad[6] = ipad[6]; + tmps[gid].ipad[7] = ipad[7]; + + tmps[gid].opad[0] = opad[0]; + tmps[gid].opad[1] = opad[1]; + tmps[gid].opad[2] = opad[2]; + tmps[gid].opad[3] = opad[3]; + tmps[gid].opad[4] = opad[4]; + tmps[gid].opad[5] = opad[5]; + tmps[gid].opad[6] = opad[6]; + tmps[gid].opad[7] = opad[7]; + + for (u32 i = 0, j = 1; i < ((truecrypt_mdlen / 8) / 4); i += 8, j += 1) + { + s4[0] = j; + + u32 dgst[8]; + + hmac_sha256_run2 (s0, s1, s2, s3, s4, s5, s6, s7, ipad, opad, dgst); + + tmps[gid].dgst[i + 0] = dgst[0]; + tmps[gid].dgst[i + 1] = dgst[1]; + tmps[gid].dgst[i + 2] = dgst[2]; + tmps[gid].dgst[i + 3] = dgst[3]; + tmps[gid].dgst[i + 4] = dgst[4]; + tmps[gid].dgst[i + 5] = dgst[5]; + tmps[gid].dgst[i + 6] = dgst[6]; + tmps[gid].dgst[i + 7] = dgst[7]; + + tmps[gid].out[i + 0] = dgst[0]; + tmps[gid].out[i + 1] = dgst[1]; + tmps[gid].out[i + 2] = dgst[2]; + tmps[gid].out[i + 3] = dgst[3]; + tmps[gid].out[i + 4] = dgst[4]; + tmps[gid].out[i + 5] = dgst[5]; + tmps[gid].out[i + 6] = dgst[6]; + tmps[gid].out[i + 7] = dgst[7]; + } +} + +__kernel void m13753_loop (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + const u32 truecrypt_mdlen = salt_bufs[0].truecrypt_mdlen; + + const u32 gid = get_global_id (0); + + if (gid >= gid_max) return; + + u32 ipad[8]; + + ipad[0] = tmps[gid].ipad[0]; + ipad[1] = tmps[gid].ipad[1]; + ipad[2] = tmps[gid].ipad[2]; + ipad[3] = tmps[gid].ipad[3]; + ipad[4] = tmps[gid].ipad[4]; + ipad[5] = tmps[gid].ipad[5]; + ipad[6] = tmps[gid].ipad[6]; + ipad[7] = tmps[gid].ipad[7]; + + u32 opad[8]; + + opad[0] = tmps[gid].opad[0]; + opad[1] = tmps[gid].opad[1]; + opad[2] = tmps[gid].opad[2]; + opad[3] = tmps[gid].opad[3]; + opad[4] = tmps[gid].opad[4]; + opad[5] = tmps[gid].opad[5]; + opad[6] = tmps[gid].opad[6]; + opad[7] = tmps[gid].opad[7]; + + for (u32 i = 0; i < ((truecrypt_mdlen / 8) / 4); i += 8) + { + u32 dgst[8]; + + dgst[0] = tmps[gid].dgst[i + 0]; + dgst[1] = tmps[gid].dgst[i + 1]; + dgst[2] = tmps[gid].dgst[i + 2]; + dgst[3] = tmps[gid].dgst[i + 3]; + dgst[4] = tmps[gid].dgst[i + 4]; + dgst[5] = tmps[gid].dgst[i + 5]; + dgst[6] = tmps[gid].dgst[i + 6]; + dgst[7] = tmps[gid].dgst[i + 7]; + + u32 out[8]; + + out[0] = tmps[gid].out[i + 0]; + out[1] = tmps[gid].out[i + 1]; + out[2] = tmps[gid].out[i + 2]; + out[3] = tmps[gid].out[i + 3]; + out[4] = tmps[gid].out[i + 4]; + out[5] = tmps[gid].out[i + 5]; + out[6] = tmps[gid].out[i + 6]; + out[7] = tmps[gid].out[i + 7]; + + for (u32 j = 0; j < loop_cnt; j++) + { + u32 w0[4]; + u32 w1[4]; + u32 w2[4]; + u32 w3[4]; + + w0[0] = dgst[0]; + w0[1] = dgst[1]; + w0[2] = dgst[2]; + w0[3] = dgst[3]; + w1[0] = dgst[4]; + w1[1] = dgst[5]; + w1[2] = dgst[6]; + w1[3] = dgst[7]; + w2[0] = 0x80000000; + w2[1] = 0; + w2[2] = 0; + w2[3] = 0; + w3[0] = 0; + w3[1] = 0; + w3[2] = 0; + w3[3] = (64 + 32) * 8; + + hmac_sha256_run (w0, w1, w2, w3, ipad, opad, dgst); + + out[0] ^= dgst[0]; + out[1] ^= dgst[1]; + out[2] ^= dgst[2]; + out[3] ^= dgst[3]; + out[4] ^= dgst[4]; + out[5] ^= dgst[5]; + out[6] ^= dgst[6]; + out[7] ^= dgst[7]; + } + + tmps[gid].dgst[i + 0] = dgst[0]; + tmps[gid].dgst[i + 1] = dgst[1]; + tmps[gid].dgst[i + 2] = dgst[2]; + tmps[gid].dgst[i + 3] = dgst[3]; + tmps[gid].dgst[i + 4] = dgst[4]; + tmps[gid].dgst[i + 5] = dgst[5]; + tmps[gid].dgst[i + 6] = dgst[6]; + tmps[gid].dgst[i + 7] = dgst[7]; + + tmps[gid].out[i + 0] = out[0]; + tmps[gid].out[i + 1] = out[1]; + tmps[gid].out[i + 2] = out[2]; + tmps[gid].out[i + 3] = out[3]; + tmps[gid].out[i + 4] = out[4]; + tmps[gid].out[i + 5] = out[5]; + tmps[gid].out[i + 6] = out[6]; + tmps[gid].out[i + 7] = out[7]; + } +} + +__kernel void m13753_comp (__global pw_t *pws, __global kernel_rule_t *rules_buf, __global comb_t *combs_buf, __global bf_t *bfs_buf, __global tc_tmp_t *tmps, __global void *hooks, __global u32 *bitmaps_buf_s1_a, __global u32 *bitmaps_buf_s1_b, __global u32 *bitmaps_buf_s1_c, __global u32 *bitmaps_buf_s1_d, __global u32 *bitmaps_buf_s2_a, __global u32 *bitmaps_buf_s2_b, __global u32 *bitmaps_buf_s2_c, __global u32 *bitmaps_buf_s2_d, __global plain_t *plains_buf, __global digest_t *digests_buf, __global u32 *hashes_shown, __global salt_t *salt_bufs, __global tc_t *esalt_bufs, __global u32 *d_return_buf, __global u32 *d_scryptV_buf, const u32 bitmap_mask, const u32 bitmap_shift1, const u32 bitmap_shift2, const u32 salt_pos, const u32 loop_pos, const u32 loop_cnt, const u32 il_cnt, const u32 digests_cnt, const u32 digests_offset, const u32 combs_mode, const u32 gid_max) +{ + /** + * base + */ + + const u32 gid = get_global_id (0); + const u32 lid = get_local_id (0); + + if (gid >= gid_max) return; + + u32 ukey1[8]; + + ukey1[0] = swap32 (tmps[gid].out[ 0]); + ukey1[1] = swap32 (tmps[gid].out[ 1]); + ukey1[2] = swap32 (tmps[gid].out[ 2]); + ukey1[3] = swap32 (tmps[gid].out[ 3]); + ukey1[4] = swap32 (tmps[gid].out[ 4]); + ukey1[5] = swap32 (tmps[gid].out[ 5]); + ukey1[6] = swap32 (tmps[gid].out[ 6]); + ukey1[7] = swap32 (tmps[gid].out[ 7]); + + u32 ukey2[8]; + + ukey2[0] = swap32 (tmps[gid].out[ 8]); + ukey2[1] = swap32 (tmps[gid].out[ 9]); + ukey2[2] = swap32 (tmps[gid].out[10]); + ukey2[3] = swap32 (tmps[gid].out[11]); + ukey2[4] = swap32 (tmps[gid].out[12]); + ukey2[5] = swap32 (tmps[gid].out[13]); + ukey2[6] = swap32 (tmps[gid].out[14]); + ukey2[7] = swap32 (tmps[gid].out[15]); + + u32 data[4]; + + data[0] = esalt_bufs[0].data_buf[0]; + data[1] = esalt_bufs[0].data_buf[1]; + data[2] = esalt_bufs[0].data_buf[2]; + data[3] = esalt_bufs[0].data_buf[3]; + + const u32 signature = esalt_bufs[0].signature; + + u32 tmp[4]; + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + aes256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + serpent256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + twofish256_decrypt_xts (ukey1, ukey2, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + u32 ukey3[8]; + + ukey3[0] = tmps[gid].out[16]; + ukey3[1] = tmps[gid].out[17]; + ukey3[2] = tmps[gid].out[18]; + ukey3[3] = tmps[gid].out[19]; + ukey3[4] = tmps[gid].out[20]; + ukey3[5] = tmps[gid].out[21]; + ukey3[6] = tmps[gid].out[22]; + ukey3[7] = tmps[gid].out[23]; + + u32 ukey4[8]; + + ukey4[0] = tmps[gid].out[24]; + ukey4[1] = tmps[gid].out[25]; + ukey4[2] = tmps[gid].out[26]; + ukey4[3] = tmps[gid].out[27]; + ukey4[4] = tmps[gid].out[28]; + ukey4[5] = tmps[gid].out[29]; + ukey4[6] = tmps[gid].out[30]; + ukey4[7] = tmps[gid].out[31]; + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + aes256_decrypt_xts (ukey2, ukey4, tmp, tmp); + twofish256_decrypt_xts (ukey1, ukey3, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + serpent256_decrypt_xts (ukey2, ukey4, tmp, tmp); + aes256_decrypt_xts (ukey1, ukey3, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + twofish256_decrypt_xts (ukey2, ukey4, tmp, tmp); + serpent256_decrypt_xts (ukey1, ukey3, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + u32 ukey5[8]; + + ukey5[0] = tmps[gid].out[32]; + ukey5[1] = tmps[gid].out[33]; + ukey5[2] = tmps[gid].out[34]; + ukey5[3] = tmps[gid].out[35]; + ukey5[4] = tmps[gid].out[36]; + ukey5[5] = tmps[gid].out[37]; + ukey5[6] = tmps[gid].out[38]; + ukey5[7] = tmps[gid].out[39]; + + u32 ukey6[8]; + + ukey6[0] = tmps[gid].out[40]; + ukey6[1] = tmps[gid].out[41]; + ukey6[2] = tmps[gid].out[42]; + ukey6[3] = tmps[gid].out[43]; + ukey6[4] = tmps[gid].out[44]; + ukey6[5] = tmps[gid].out[45]; + ukey6[6] = tmps[gid].out[46]; + ukey6[7] = tmps[gid].out[47]; + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + aes256_decrypt_xts (ukey3, ukey6, tmp, tmp); + twofish256_decrypt_xts (ukey2, ukey5, tmp, tmp); + serpent256_decrypt_xts (ukey1, ukey4, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } + + { + tmp[0] = data[0]; + tmp[1] = data[1]; + tmp[2] = data[2]; + tmp[3] = data[3]; + + serpent256_decrypt_xts (ukey3, ukey6, tmp, tmp); + twofish256_decrypt_xts (ukey2, ukey5, tmp, tmp); + aes256_decrypt_xts (ukey1, ukey4, tmp, tmp); + + if (((tmp[0] == signature) && (tmp[3] == 0)) || ((tmp[0] == signature) && ((tmp[1] >> 16) <= 5))) + { + mark_hash (plains_buf, d_return_buf, salt_pos, 0, 0, gid, 0); + } + } +} diff --git a/include/kernel_vendor.h b/include/kernel_vendor.h index 7f9c789..3adde96 100644 --- a/include/kernel_vendor.h +++ b/include/kernel_vendor.h @@ -119,6 +119,15 @@ #if KERN_TYPE == 12400 #undef _unroll #endif +#if KERN_TYPE == 13721 +#undef _unroll +#endif +#if KERN_TYPE == 13722 +#undef _unroll +#endif +#if KERN_TYPE == 13723 +#undef _unroll +#endif #endif #endif @@ -183,6 +192,15 @@ #if KERN_TYPE == 13000 #undef _unroll #endif +#if KERN_TYPE == 13721 +#undef _unroll +#endif +#if KERN_TYPE == 13722 +#undef _unroll +#endif +#if KERN_TYPE == 13723 +#undef _unroll +#endif #endif #endif diff --git a/src/hashcat.c b/src/hashcat.c index 79a3a4e..d8e40da 100644 --- a/src/hashcat.c +++ b/src/hashcat.c @@ -10588,7 +10588,6 @@ int main (int argc, char **argv) dgst_pos3 = 3; break; - default: usage_mini_print (PROGNAME); return (-1); }