CN115114613B - System for password cracking by using ASIC and GPU heterogeneous type resources - Google Patents
System for password cracking by using ASIC and GPU heterogeneous type resources Download PDFInfo
- Publication number
- CN115114613B CN115114613B CN202211028758.7A CN202211028758A CN115114613B CN 115114613 B CN115114613 B CN 115114613B CN 202211028758 A CN202211028758 A CN 202211028758A CN 115114613 B CN115114613 B CN 115114613B
- Authority
- CN
- China
- Prior art keywords
- cracking
- module
- password
- information
- deciphering
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/45—Structures or tools for the administration of authentication
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/50—Allocation of resources, e.g. of the central processing unit [CPU]
- G06F9/5005—Allocation of resources, e.g. of the central processing unit [CPU] to service a request
- G06F9/5027—Allocation of resources, e.g. of the central processing unit [CPU] to service a request the resource being a machine, e.g. CPUs, Servers, Terminals
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2107—File encryption
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Storage Device Security (AREA)
Abstract
Description
技术领域technical field
本发明涉及口令破解技术领域,具体地说,涉及采用ASIC和GPU异构类型资源进行口令破解的系统。The invention relates to the technical field of password cracking, in particular to a system for password cracking using ASIC and GPU heterogeneous resources.
背景技术Background technique
文档类、压缩类的口令破解是最为普遍的现实需求,其加密方式对口令的变换具有很高的复杂度,目前国内业界的破解产品主要采用通用资源+开源软件的方式进行搭建,硬件部分一般都是集群化部署GPU服务器,在进行口令破解时,GPU运算较难的数据时,反应速度慢,而ASIC对运算较难的数据计算速度快,但GPU和ASIC都有着自己相应的破解口令类型;File and compression password cracking is the most common practical requirement, and its encryption method has a high complexity for password transformation. At present, the cracking products in the domestic industry are mainly built in the way of general resources + open source software, and the hardware part is generally All GPU servers are deployed in clusters. When cracking passwords, the GPU has a slow response speed when computing difficult data, while ASIC is fast for computing difficult data, but both GPU and ASIC have their own corresponding types of cracking passwords. ;
现有技术的缺点主要表现为以下两个方面:The shortcoming of prior art mainly shows as following two aspects:
硬件方面:GPU服务器的计算速度不够理想、功耗较高、寿命有限,为达到足够的算力,部署的规模往往很大,建设成本和使用成本居高不下;In terms of hardware: the calculation speed of GPU servers is not ideal, the power consumption is high, and the lifespan is limited. In order to achieve sufficient computing power, the scale of deployment is often large, and the construction cost and use cost remain high;
软件方面:开源软件常见算法完善程度、资源调度管理以及易用性等诸多方面仍存在较大的提升空间;In terms of software: There is still a lot of room for improvement in many aspects such as the perfection of common algorithms of open source software, resource scheduling management, and ease of use;
随着加密算法的进步和口令强度的提升,口令破解对产品软硬件的要求越来越高,本发明针对现有技术的缺点,将ASIC和GPU进行组合来解决上述的问题。With the advancement of encryption algorithms and the enhancement of password strength, password cracking has higher and higher requirements for product software and hardware. The present invention addresses the shortcomings of the prior art by combining ASIC and GPU to solve the above problems.
发明内容Contents of the invention
本发明的目的在于提供采用ASIC和GPU异构类型资源进行口令破解的系统,以解决上述背景技术中提出的问题。The purpose of the present invention is to provide a system for cracking passwords using ASIC and GPU heterogeneous resources, so as to solve the problems raised in the above-mentioned background technology.
为实现上述目的,本发明提供采用ASIC和GPU异构类型资源进行口令破解的系统,包括信息提取单元、破解选择单元和破解控制单元;In order to achieve the above object, the present invention provides a system for password cracking using ASIC and GPU heterogeneous resources, including an information extraction unit, a cracking selection unit, and a cracking control unit;
所述信息提取单元用于对资源文件进行提取,获取资源文件的摘要信息,并在摘要信息获取完成后触发破解指令;The information extraction unit is used to extract the resource file, obtain the summary information of the resource file, and trigger the cracking instruction after the summary information is obtained;
所述破解选择单元对信息提取单元接收破解指令,并根据摘要信息选择指定的破译节点,以此来做到对资源文件进行对应破解的效果;The cracking selection unit receives the cracking instruction from the information extraction unit, and selects a designated cracking node according to the summary information, so as to achieve the effect of corresponding cracking on the resource file;
所述破解控制单元通过破解选择单元选择的破译节点对资源文件进行破解,并在破解完成后,对破解后的信息进行测试。The deciphering control unit deciphers the resource file through the deciphering node selected by the deciphering selection unit, and tests the deciphered information after the deciphering is completed.
作为本技术方案的进一步改进,所述信息提取单元包括摘要信息识别模块、摘要信息提取模块和破解触发模块;As a further improvement of the technical solution, the information extraction unit includes a summary information identification module, a summary information extraction module and a cracking trigger module;
所述摘要信息识别模块对资源文件进行识别,确定资源文件中解密需要的关键信息;The summary information identification module identifies the resource file, and determines the key information required for decryption in the resource file;
所述摘要信息提取模块用于将摘要信息识别模块中识别出的解密需要的关键信息提取出来,并将提取出来的信息定义为摘要信息;The summary information extraction module is used to extract key information required for decryption identified in the summary information identification module, and define the extracted information as summary information;
所述破解触发模块用于接收摘要信息提取模块提取出的摘要信息,并在接收到摘要信息后触发对信息破解的指令,同时将摘要信息以及破解指令发送到破解选择单元中,由破解选择单元对摘要信息进行破解。The cracking trigger module is used to receive the summary information extracted by the summary information extraction module, and after receiving the summary information, trigger an instruction to crack the information, and simultaneously send the summary information and the cracking command to the cracking selection unit, and the cracking selection unit Decipher the summary information.
作为本技术方案的进一步改进,所述破解选择单元包括破解服务器和破译策略设置模块;As a further improvement of the technical solution, the cracking selection unit includes a cracking server and a cracking strategy setting module;
所述破解服务器用于接收破解触发模块发送的摘要信息以及破解指令,使破解服务器对摘要信息进行破解操作;The cracking server is used to receive the summary information and the cracking instruction sent by the cracking trigger module, so that the cracking server can crack the summary information;
所述破译策略设置模块用于在破解服务器接收破解触发模块发送的摘要信息,并根据接收到的摘要信息进行破译策略的设置。The deciphering strategy setting module is used for receiving summary information sent by the cracking trigger module at the cracking server, and setting the deciphering strategy according to the received summary information.
作为本技术方案的进一步改进,所述破解选择单元还包括破解口令分析模块、破译节点类别选择模块和破译节点分配模块;As a further improvement of the technical solution, the cracking selection unit further includes a cracking password analysis module, a cracking node category selection module, and a cracking node allocation module;
所述破解口令分析模块对摘要信息进行分析,判断摘要信息的种类,确定对摘要信息进行破解的破解口令,分析出需要对摘要信息进行破解的口令;The cracking password analysis module analyzes the summary information, judges the type of the summary information, determines the cracking password for cracking the summary information, and analyzes the password that needs to be cracked for the summary information;
所述破译节点类别选择模块用于根据破解口令分析模块分析出的破解口令以及破译策略设置模块形成的破译策略来对破译节点进行类别的选择,选择出合适破解摘要信息的破译节点,确定摘要信息选择ASIC或GPU进行口令破解;The deciphering node category selection module is used to select the deciphering node category according to the deciphering password analyzed by the deciphering password analysis module and the deciphering strategy formed by the deciphering strategy setting module, select the deciphering node suitable for deciphering the summary information, and determine the summary information Choose ASIC or GPU for password cracking;
所述破译节点分配模块用于根据破译节点类别选择模块选择出的破译节点以及破译策略设置模块设置的破译策略进行破译节点的分配,分配出适合破解摘要信息的破译节点。The deciphering node allocation module is used to allocate deciphering nodes according to the deciphering nodes selected by the deciphering node category selection module and the deciphering strategy set by the deciphering strategy setting module, and allocate deciphering nodes suitable for deciphering summary information.
作为本技术方案的进一步改进,所述破解控制单元包括节点破译模块、破译信息收集反馈模块、破解测试模块;As a further improvement of the technical solution, the cracking control unit includes a node cracking module, a cracking information collection feedback module, and a cracking test module;
所述节点破译模块用于接收破译节点分配模块对破译节点分配的信息,并根据破译节点分配的信息对摘要信息进行破译;The node deciphering module is used to receive the information assigned by the deciphering node assignment module to the deciphering node, and decipher the summary information according to the information assigned by the deciphering node;
所述破译信息收集反馈模块在节点破译模块对摘要信息破解的过程中,对节点破译模块破解摘要信息的进行实时记录,并将记录到的信息进行实时返回到破解服务器中,并由破解服务器判断设置的破解口令分析模块设置的破解口令是否正确;The deciphering information collection feedback module records in real time the summary information cracked by the node deciphering module during the process of deciphering the summary information by the node deciphering module, and returns the recorded information to the cracking server in real time, and is judged by the cracking server Whether the crack password set by the set crack password analysis module is correct;
所述破解测试模块用于在节点破译模块破解掉摘要信息后,对破解摘要信息的口令进行验证,当验证完成后,向破解触发模块中反馈破解结束的指令。The cracking test module is used to verify the password for cracking the summary information after the node cracking module cracks the summary information, and when the verification is completed, feed back the cracking end instruction to the cracking trigger module.
作为本技术方案的进一步改进,所述节点破译模块在对摘要信息进行破译的步骤如下:As a further improvement of the technical solution, the steps of the node deciphering module deciphering the summary information are as follows:
S1、任务开始,向板卡发送“任务数据”,此数据在破解当前任务时只发送一次;S1. When the task starts, send "task data" to the board. This data is only sent once when cracking the current task;
S2、根据破译策略设置模块设置的破译策略生成“口令数据”;S2. Generate "password data" according to the deciphering strategy set by the deciphering strategy setting module;
S3、检查板卡输入缓存是否满,不满时转到S4,若缓存满时,口令数据在S3步骤等待,等卡板输入缓存不为满时转到S4,;S3, check whether the board input cache is full, forward to S4 when not satisfied, if the cache is full, the password data waits in the S3 step, and forward to S4 when the board input cache is not full;
S4、向板卡发送“口令数据”;S4. Send "password data" to the board;
S5、检查板卡输出缓存是否空,缓存为非空时转到S6,缓存为空时转到S7;S5, check whether the board output buffer is empty, transfer to S6 when the buffer is not empty, and transfer to S7 when the buffer is empty;
S6、检查板卡返回的口令,若正确,转到S9,若不正确转到S7;S6, check the password returned by the board, if correct, go to S9, if not go to S7;
S7、检查用户是否停止任务,如果用户停止任务,则转到S10,否则转到S8;S7, check whether the user stops the task, if the user stops the task, then go to S10, otherwise go to S8;
S8、检查当前破解模式口令是否生成完成,如果生成完成,则转到S10,如果未生成转到S2;S8, check whether the current cracking mode password is generated and completed, if generated, then go to S10, if not generated and go to S2;
S9、返回破译成功;S9, returning the decryption success;
S10、结束破译。S10, end deciphering.
作为本技术方案的进一步改进,在节点破译模块对摘要信息进行破译的过程中,流程结束存在三种可能:①、已计算出正确口令,②、用户停止任务,③、策略执行完成,未计算出正确口令。As a further improvement of this technical solution, in the process of deciphering the summary information by the node deciphering module, there are three possibilities for the end of the process: ①, the correct password has been calculated, ②, the user stops the task, ③, the policy execution is completed, and the calculation is not completed Enter the correct password.
作为本技术方案的进一步改进,所述破译策略设置模块进行破译策略设置采用暴力穷尽策略,其步骤如下:As a further improvement of the technical solution, the deciphering strategy setting module adopts a brute force exhaustion strategy for setting the deciphering strategy, and the steps are as follows:
S1、测评目标:口令破解系统计算资源文件任务;S1. Evaluation objective: password cracking system computing resource file task;
S2、前置条件:S2. Preconditions:
①、系统部署完成;①. System deployment completed;
②、系统添加自定义字符集穷尽策略。②. The system adds a custom character set exhaustion strategy.
S3、测试步骤:S3. Test steps:
①、访问系统中的预定义策略页面;①. Visit the predefined strategy page in the system;
②、填写任务名称并点击上传文件;②. Fill in the task name and click upload file;
③、在候选策略中选择信息;③. Select information in the candidate strategy;
④、点击新建任务;④. Click New Task;
⑤、访问预定义策略页面;⑤. Access the predefined policy page;
⑥、填入任务名称;⑥. Fill in the task name;
⑦、上传文件;⑦. Upload files;
⑧、在候选策略中选择信息;8. Select information in the candidate strategy;
⑨、点击新建任务;⑨. Click New Task;
⑩、任务完成后查看口令是否为已知口令,同时点击任务详情,查看消耗时间;⑩. After the task is completed, check whether the password is a known password, and click on the task details at the same time to check the time consumed;
S4、预期结果:S4. Expected results:
①、破解结果为已知口令;①. The cracking result is a known password;
②、无结果且执行时间小于370秒。②. No result and the execution time is less than 370 seconds.
与现有技术相比,本发明的有益效果:Compared with prior art, the beneficial effect of the present invention:
1、该采用ASIC和GPU异构类型资源进行口令破解的系统中,通过破解口令分析模块对摘要信息进行分析,判断摘要信息的种类,并根据破解种类来分析破解摘要信息的对应破解口令,并通过破译节点类别选择模块来选择使用ASIC或GPU,进而找寻到对应的破解口令,使系统对摘要信息进行快速的破解,加快破解的速度,同时将ASIC或GPU进行结合使用,加快资源文件的破解,同时也减少等待的时间,使复杂的运算给ASIC计算,简单的运算给GPU进行计算,以此来提高系统对资源文件破解的运算速度。1. In the system using ASIC and GPU heterogeneous type resources for password cracking, the summary information is analyzed by the crack password analysis module, the type of the summary information is judged, and the corresponding crack password for cracking the summary information is analyzed according to the type of cracking, and Choose to use ASIC or GPU by deciphering the node category selection module, and then find the corresponding cracking password, so that the system can quickly crack the summary information and speed up the cracking speed. At the same time, use ASIC or GPU in combination to speed up the cracking of resource files , At the same time, it also reduces the waiting time, so that complex calculations are calculated by ASIC, and simple calculations are calculated by GPU, so as to improve the system's calculation speed for resource file cracking.
2、该采用ASIC和GPU异构类型资源进行口令破解的系统中,通过信息提取单元对资源文件进行摘要信息的提取,避免了系统对整个资源文件的破解,使系统在对敏感文件进行破解时,只需要提取敏感文件中的部分信息即可来执行破解任务,实现破解的文件与原始文件的分离,确保资源文件破解的安全性,同时从资源文件中提取摘要文件来进行破解,加快系统对文件的破解速度,降低系统的运算程度。2. In the system using ASIC and GPU heterogeneous resources for password cracking, the information extraction unit extracts the summary information of the resource file, which avoids the cracking of the entire resource file by the system, so that when the system cracks sensitive files, , you only need to extract part of the information in the sensitive file to perform the cracking task, realize the separation of the cracked file and the original file, ensure the security of resource file cracking, and extract the summary file from the resource file to crack, speeding up the system. The cracking speed of the file reduces the computing power of the system.
附图说明Description of drawings
图1为本发明的整体框图;Fig. 1 is the overall block diagram of the present invention;
图2为本发明信息提取单元的框图;Fig. 2 is a block diagram of the information extraction unit of the present invention;
图3为本发明破解选择单元的框图;Fig. 3 is the block diagram of cracking selection unit of the present invention;
图4为本发明破解控制单元的框图;Fig. 4 is the block diagram of cracking control unit of the present invention;
图5为本发明整体展示框图;Fig. 5 is an overall display block diagram of the present invention;
图6为本发明节点破译模块破译摘要信息的流程框图。Fig. 6 is a block diagram of the process of deciphering summary information by the node deciphering module of the present invention.
图中各个标号意义为:The meanings of each symbol in the figure are:
1、信息提取单元;11、摘要信息识别模块;12、摘要信息提取模块;13、破解触发模块;1. Information extraction unit; 11. Abstract information identification module; 12. Abstract information extraction module; 13. Cracking trigger module;
2、破解选择单元;21、破解服务器;22、破译策略设置模块;23、破解口令分析模块;24、破译节点类别选择模块;25、破译节点分配模块;2. Deciphering selection unit; 21. Deciphering server; 22. Deciphering strategy setting module; 23. Deciphering password analysis module; 24. Deciphering node category selection module; 25. Deciphering node allocation module;
3、破解控制单元;31、节点破译模块;32、破译信息收集反馈模块;33、破解测试模块。3. Deciphering control unit; 31. Node deciphering module; 32. Deciphering information collection and feedback module; 33. Deciphering test module.
具体实施方式Detailed ways
下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例仅仅是本发明一部分实施例,而不是全部的实施例。基于本发明中的实施例,本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例,都属于本发明保护的范围。The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.
实施例1Example 1
对压缩文件、Office文档等软件的加密过程可以归纳为以下几个步骤:The encryption process of software such as compressed files and Office documents can be summarized into the following steps:
1、口令编码:将用户输入的口令字符串转换成相应软件规定的编码;1. Password encoding: convert the password string entered by the user into the encoding specified by the corresponding software;
2、口令扩展:用盐密码学用语,即随机数,通常为8或16字节对口令编码进行扩展;2. Password expansion: use salt cryptography, that is, random numbers, usually 8 or 16 bytes to expand the password encoding;
3、Hash变换:对扩展结果进行多轮Hash变换,生成两个Hash值,H1用于做口令校验,H2用于做加密密钥,这是加密过程中最为耗时的运算步骤;3. Hash transformation: Perform multiple rounds of Hash transformation on the extended result to generate two Hash values, H1 is used for password verification, and H2 is used as an encryption key, which is the most time-consuming operation step in the encryption process;
4、AES加密:用H2作为AES加密的密钥,对明文数据进行加密处理生成密文;4. AES encryption: use H2 as the key for AES encryption, and encrypt the plaintext data to generate ciphertext;
5、将盐、H1和密文按规定格式写入文件。5. Write the salt, H1 and ciphertext into the file according to the specified format.
现有对文件进行口令破解的缺点主要表现为以下两个方面:The shortcomings of existing password cracking methods for files are mainly manifested in the following two aspects:
硬件方面:GPU服务器的计算速度不够理想、功耗较高、寿命有限,为达到足够的算力,部署的规模往往很大,建设成本和使用成本居高不下;In terms of hardware: the calculation speed of GPU servers is not ideal, the power consumption is high, and the lifespan is limited. In order to achieve sufficient computing power, the scale of deployment is often large, and the construction cost and use cost remain high;
软件方面:开源软件常见算法完善程度、资源调度管理以及易用性等诸多方面仍存在较大的提升空间;In terms of software: There is still a lot of room for improvement in many aspects such as the perfection of common algorithms of open source software, resource scheduling management, and ease of use;
随着加密算法的进步和口令强度的提升,口令破解对产品软硬件的要求越来越高,本发明针对现有技术的缺点,将ASIC和GPU进行组合来解决上述的问题。具体的结合方法如下:With the advancement of encryption algorithms and the enhancement of password strength, password cracking has higher and higher requirements for product software and hardware. The present invention addresses the shortcomings of the prior art by combining ASIC and GPU to solve the above problems. The specific combination method is as follows:
本发明提供采用ASIC和GPU异构类型资源进行口令破解的系统,请参阅图1-图6,包括信息提取单元1、破解选择单元2和破解控制单元3;The present invention provides a system for cracking passwords using ASIC and GPU heterogeneous resources, please refer to Figures 1-6, including an
信息提取单元1用于对资源文件进行提取,获取资源文件的摘要信息,并在摘要信息获取完成后触发破解指令;The
信息提取单元1包括摘要信息识别模块11、摘要信息提取模块12和破解触发模块13;The
摘要信息识别模块11对资源文件进行识别,确定资源文件中解密需要的关键信息;The abstract
摘要信息提取模块12用于将摘要信息识别模块11中识别出的解密需要的关键信息提取出来,并将提取出来的信息定义为摘要信息;所谓摘要信息,指的就是:从资源文件加密文件中提取的盐和H1;The abstract information extraction module 12 is used to extract the key information needed for decryption identified in the abstract
同时从资源文件中提取摘要信息,避免了系统对整个资源文件的破解,使系统在对一些敏感文件进行破解时,只需要提取敏感文件中的部分信息即可来执行破解任务,实现破解的文件与原始文件的分离,确保资源文件破解的安全性,同时从资源文件中提取摘要文件来进行破解,加快系统对文件的破解速度,降低系统的运算程度;At the same time, the summary information is extracted from the resource file, which avoids the cracking of the entire resource file by the system, so that when the system cracks some sensitive files, it only needs to extract part of the information in the sensitive file to perform the cracking task and realize the cracked file. The separation from the original file ensures the safety of resource file cracking, and at the same time extracts the abstract file from the resource file for cracking, speeds up the system's cracking speed of the file, and reduces the degree of system calculation;
破解触发模块13用于接收摘要信息提取模块12提取出的摘要信息,并在接收到摘要信息后触发对信息破解的指令,同时将摘要信息以及破解指令发送到破解选择单元2中,由破解选择单元2对摘要信息进行破解;The cracking
破解选择单元2对信息提取单元1接收破解指令,并根据摘要信息选择指定的破译节点,以此来做到对资源文件进行对应破解的效果;破译节点指的是对摘要信息进行破解计算的设备,即服务器+计算资源,计算资源包括ASIC或GPU,通过破译节点来对摘要信息进行破解;The cracking
破解选择单元2包括破解服务器21、破译策略设置模块22、破解口令分析模块23、破译节点类别选择模块24和破译节点分配模块25;Deciphering
破解服务器21用于接收破解触发模块13发送的摘要信息以及破解指令,使破解服务器21对摘要信息进行破解操作;在进行摘要信息的破解操作时,将接收到的摘要信息发送到破解口令分析模块23中;Cracking
破译策略设置模块22用于在破解服务器21接收破解触发模块13发送的摘要信息,并根据接收到的摘要信息进行破译策略的设置;The deciphering
破译策略设置模块22进行破译策略设置采用暴力穷尽策略,其步骤如下:The deciphering
S1、测评目标:口令破解系统计算资源文件任务,如计算Office2013任务;S1. Evaluation objective: password cracking system computing resource file tasks, such as computing Office2013 tasks;
S2、前置条件:S2. Preconditions:
①、系统部署完成;①. System deployment completed;
②、系统添加自定义字符集穷尽策略:穷尽位数为8,穷尽字符集为【58abcehGPR#】,暴力破解策略名称为brute_9600(口令数量为214,358,881)。②. The system adds a custom character set exhaustion strategy: the number of exhaustion digits is 8, the exhaustion character set is [58abcehGPR#], and the name of the brute force cracking strategy is brute_9600 (the number of passwords is 214,358,881).
S3、测试步骤:S3. Test steps:
①、访问系统中的预定义策略页面,如【F0139】;①. Access the predefined strategy page in the system, such as [F0139];
②、填写任务名称并点击上传文件,如【Alg_09600_office2013_test.docx.brf】;②. Fill in the task name and click to upload the file, such as [Alg_09600_office2013_test.docx.brf];
③、在候选策略中选择信息,如【brute_9600】;③. Select information in the candidate strategy, such as [brute_9600];
④、点击新建任务;④. Click New Task;
⑤、访问预定义策略页面;⑤. Access the predefined policy page;
⑥、填入任务名称,如【F0139_2】;⑥. Fill in the task name, such as 【F0139_2】;
⑦、上传文件,如【Alg_09600_office2013_nopass_test.docx.brf】;⑦. Upload files, such as [Alg_09600_office2013_nopass_test.docx.brf];
⑧、在候选策略中选择信息,如【brute_9600】;⑧. Select information in the candidate strategy, such as [brute_9600];
⑨、点击新建任务;⑨. Click New Task;
⑩、任务完成后查看口令是否为已知口令,同时点击任务详情,查看消耗时间;⑩. After the task is completed, check whether the password is a known password, and click on the task details at the same time to check the time consumed;
S4、预期结果:S4. Expected results:
①、破解结果为已知口令;①. The cracking result is a known password;
②、无结果且执行时间小于370秒;②. No result and the execution time is less than 370 seconds;
通过采用暴力穷尽策略来缩小破解口令选取的范围,提高破译节点类别选择模块24对破解口令找寻的准确度,进而做到减少系统破解所等待的时间;Narrow down the scope of cracking password selection by adopting the brute force exhaustion strategy, improve the accuracy of deciphering node
破解口令分析模块23对摘要信息进行分析,判断摘要信息的种类,确定对摘要信息进行破解的破解口令,如ASIC破解的口令类别包括Office 2007、Office 2010、Office2013、WinRAR4、WinRAR5、7Zip、WinZip-AES、Oracle 12+、Apple Secure Note、FileVault2、APFS等;GPU破解的口令类别有基本散列算法,如:MD4、MD5、SHA-1、SHA-256、SHA-512等,PDF加密文档、HWP加密文档,其它常见加密口令,分析出需要对摘要信息进行破解的口令,以用来确定破解摘要信息的最佳破解口令;Crack the
破译节点类别选择模块24用于根据破解口令分析模块23分析出的破解口令以及破译策略设置模块22形成的破译策略来对破译节点进行类别的选择,选择出合适破解摘要信息的破译节点,确定摘要信息选择ASIC或GPU进行口令破解;The deciphering node
破译节点分配模块25用于根据破译节点类别选择模块24选择出的破译节点以及破译策略设置模块22设置的破译策略进行破译节点的分配,分配出适合破解摘要信息的破译节点,获取对摘要信息的破译节点。The deciphering
破解控制单元3通过破解选择单元2选择的破译节点对资源文件进行破解,并在破解完成后,对破解后的信息进行测试。The deciphering
破解控制单元3包括节点破译模块31、破译信息收集反馈模块32、破解测试模块33;The cracking
节点破译模块31用于接收破译节点分配模块25对破译节点分配的信息,并根据破译节点分配的信息对摘要信息进行破译;The
节点破译模块31在对摘要信息进行破译的步骤如下:The steps of deciphering the summary information by the
S1、任务开始,向板卡发送“任务数据”,此数据在破解当前任务时只发送一次;S1. When the task starts, send "task data" to the board. This data is only sent once when cracking the current task;
S2、根据破译策略设置模块22设置的破译策略生成“口令数据”;S2. Generate "password data" according to the deciphering strategy set by the deciphering
S3、检查板卡输入缓存是否满,不满时转到S4,若缓存满时,口令数据在S3步骤等待,等卡板输入缓存不为满时转到S4,;S3, check whether the board input cache is full, forward to S4 when not satisfied, if the cache is full, the password data waits in the S3 step, and forward to S4 when the board input cache is not full;
S4、向板卡发送“口令数据”;S4. Send "password data" to the board;
S5、检查板卡输出缓存是否空,缓存为非空时转到S6,缓存为空时转到S7;S5, check whether the board output buffer is empty, transfer to S6 when the buffer is not empty, and transfer to S7 when the buffer is empty;
S6、检查板卡返回的口令,若正确,转到S9,若不正确转到S7;S6, check the password returned by the board, if correct, go to S9, if not go to S7;
S7、检查用户是否停止任务,如果用户停止任务,则转到S10,否则转到S8;S7, check whether the user stops the task, if the user stops the task, then go to S10, otherwise go to S8;
S8、检查当前破解模式口令是否生成完成,如果生成完成,则转到S10,如果未生成转到S2;S8, check whether the current cracking mode password is generated and completed, if generated, then go to S10, if not generated and go to S2;
S9、返回破译成功;S9, returning the decryption success;
S10、结束破译。S10, end deciphering.
在节点破译模块31对摘要信息进行破译的过程中,流程结束存在三种可能:①、已计算出正确口令,②、用户停止任务,③、策略执行完成,未计算出正确口令;In the process of deciphering the summary information by the
破译信息收集反馈模块32在节点破译模块31对摘要信息破解的过程中,对节点破译模块31破解摘要信息的进行实时记录,并将记录到的信息进行实时返回到破解服务器21中,并由破解服务器21判断设置的破解口令分析模块23设置的破解口令是否正确;The deciphering information
破解测试模块33用于在节点破译模块31破解掉摘要信息后,对破解摘要信息的口令进行验证,当验证完成后,向破解触发模块13中反馈破解结束的指令。The cracking
本发明具体的使用步骤如下:摘要信息识别模块11对需要破解的资源文件进行识别,识别资源文件的摘要信息关键信息,并由摘要信息提取模块12将摘要信息进行提取,提取的摘要信息传输到破解触发模块13中,使破解触发模块13向破解服务器21、破译策略设置模块22传输,同时破解触发模块13接收到摘要信息后,触发对信息破解的指令,使破解服务器21开始对摘要信息进行破解操作,破译策略设置模块22接收到摘要信息后,对摘要信息进行暴力穷尽策略,获取摘要信息精准的破解口令,加快对破解摘要信息的破解口令的找寻,同时破解服务器21将接收到摘要信息传输到破解口令分析模块23中,由破解口令分析模块23进行分析,判断摘要信息的种类,如ASIC或GPU,破译策略设置模块22获取的破解口令信息以及破解口令分析模块23分析的摘要信息的种类发送到破译节点类别选择模块24中,由破译节点类别选择模块24选择出合适破解摘要信息的破译节点,确定摘要信息选择ASIC或GPU进行口令破解;The specific use steps of the present invention are as follows: the abstract
通过破解口令分析模块23对摘要信息进行分析,判断摘要信息的种类,并根据破解种类来分析破解摘要信息的对应破解口令,并通过破译节点类别选择模块24来选择使用ASIC或GPU,进而找寻到对应的破解口令,使系统对摘要信息进行快速的破解,加快破解的速度,同时将ASIC或GPU进行结合使用,加快资源文件的破解,同时也减少等待的时间,使复杂的运算给ASIC计算,简单的运算给GPU进行计算,以此来提高系统对资源文件破解的运算速度,同时破译节点分配模块25用于根据破译节点类别选择模块24选择出的破译节点以及破译策略设置模块22设置的破译策略进行破译节点的分配,获取对摘要信息的破译节点,节点破译模块31接收破译节点分配模块25发送的信息,并对摘要信息进行破解,在节点破译模块31破解摘要信息的过程中,破译信息收集反馈模块32对破解的过程进行收集,并将收集到的信息反馈到破解服务器21中,并由破解服务器21判断设置的破解口令分析模块23设置的破解口令是否正确,当破解完成后,及计算出H1,将计算出来的H1与文件中的H1做比较,如果一致,就代表破解成功,当破解成功后,破解测试模块33向破解触发模块13发送破解结束的指令,此时表面该文件破解结束。Analyze the summary information by cracking the
以上显示和描述了本发明的基本原理、主要特征和本发明的优点。本行业的技术人员应该了解,本发明不受上述实施例的限制,上述实施例和说明书中描述的仅为本发明的优选例,并不用来限制本发明,在不脱离本发明精神和范围的前提下,本发明还会有各种变化和改进,这些变化和改进都落入要求保护的本发明范围内。本发明要求保护范围由所附的权利要求书及其等效物界定。The basic principles, main features and advantages of the present invention have been shown and described above. Those skilled in the art should understand that the present invention is not limited by the above-mentioned embodiments, and those described in the above-mentioned embodiments and description are only preferred examples of the present invention, and are not intended to limit the present invention, without departing from the spirit and scope of the present invention. Under the premise, the present invention will have various changes and improvements, and these changes and improvements all fall within the scope of the claimed invention. The protection scope of the present invention is defined by the appended claims and their equivalents.
Claims (4)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211028758.7A CN115114613B (en) | 2022-08-26 | 2022-08-26 | System for password cracking by using ASIC and GPU heterogeneous type resources |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211028758.7A CN115114613B (en) | 2022-08-26 | 2022-08-26 | System for password cracking by using ASIC and GPU heterogeneous type resources |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN115114613A CN115114613A (en) | 2022-09-27 |
| CN115114613B true CN115114613B (en) | 2022-11-29 |
Family
ID=83335830
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211028758.7A Active CN115114613B (en) | 2022-08-26 | 2022-08-26 | System for password cracking by using ASIC and GPU heterogeneous type resources |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115114613B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN115941179B (en) * | 2023-02-14 | 2023-05-16 | 山东戎安智能科技有限公司 | Method for realizing password conversion on ASIC chip |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109981285A (en) * | 2019-03-11 | 2019-07-05 | 北京纬百科技有限公司 | A kind of password protection method, password method of calibration and system |
| CN112597479A (en) * | 2020-12-01 | 2021-04-02 | 中国科学院信息工程研究所 | GPU-based hybrid cracking mode optimization method and device for password |
| CN114186219A (en) * | 2021-12-09 | 2022-03-15 | 江苏微锐超算科技有限公司 | Heterogeneous system integration method and system for password cracking |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8769680B2 (en) * | 2003-06-12 | 2014-07-01 | International Business Machines Corporation | Alert passwords for detecting password attacks on systems |
-
2022
- 2022-08-26 CN CN202211028758.7A patent/CN115114613B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109981285A (en) * | 2019-03-11 | 2019-07-05 | 北京纬百科技有限公司 | A kind of password protection method, password method of calibration and system |
| CN112597479A (en) * | 2020-12-01 | 2021-04-02 | 中国科学院信息工程研究所 | GPU-based hybrid cracking mode optimization method and device for password |
| CN114186219A (en) * | 2021-12-09 | 2022-03-15 | 江苏微锐超算科技有限公司 | Heterogeneous system integration method and system for password cracking |
Non-Patent Citations (1)
| Title |
|---|
| 基于异构计算集群的密码口令破解系统设计与实现;张冬芳 等;《网络空间安全》;20190625;第10卷(第6期);第95-101页 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN115114613A (en) | 2022-09-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN112019332B (en) | Encryption and decryption method based on micro-service, API gateway system and equipment | |
| CN109921894B (en) | Data transmission encryption method, device, storage medium, and server | |
| CN101820346B (en) | Secure digital signature method | |
| CN111970236B (en) | Cross-network data transmission method and device | |
| CN1221900C (en) | User's identity authentication method of dynamic electron cipher equipment and its resources sharing system | |
| CN102571357A (en) | Signature realization method and signature realization device | |
| CN104598793A (en) | Fingerprint authentication method and fingerprint authentication device | |
| CN110166451A (en) | A kind of lightweight electronic document transmitting control system and method | |
| CN107786628B (en) | Service number assignment method, apparatus, computer equipment and storage medium | |
| CN115114613B (en) | System for password cracking by using ASIC and GPU heterogeneous type resources | |
| CN109416716A (en) | Processing control apparatus, process control method and record have the recording medium of processing control program | |
| CN112241515B (en) | A digital asset authentication processing system | |
| CN116015766A (en) | Data safety transmission system for computer | |
| CN109067544A (en) | A kind of private key verification method, the apparatus and system of soft or hard combination | |
| TWI480730B (en) | Method and apparatus for measuring performance of an appliance | |
| CN116916310B (en) | Verification code generation and verification method, device and electronic device | |
| CN110570303A (en) | Business information processing method, device, storage medium and server cluster | |
| CN114116710A (en) | Data processing method, device and equipment based on block chain and storage medium | |
| CN117728947A (en) | Digital signature verification method and system based on cryptography | |
| CN106355496A (en) | Method, system and device for realizing batch electronic transactions as well as electronic signature tool | |
| CN109976709A (en) | Randomness detecting method, device, equipment and computer readable storage medium | |
| CN110585727B (en) | Resource acquisition method and device | |
| CN113204775A (en) | Data security protection method and system | |
| CN118523968A (en) | Non-invasive data flow platform encryption security analysis method and device | |
| CN115935310A (en) | Detection method, device, equipment and storage medium of weak password in login page |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |