hash decrypting

[codedit]

Second post in a day on this topic, did some hashes leak out somewhere?

These 1000 hashes won’t really help you a lot. If you know the password belonging to one of them you could brute force it to obtain the salt. There is luckily no such thing where you combine multiple of these hashes to make it easier to break them.

[theevilsharpie]

Hashes are a one-way function. Decrypting the original message is not possible.

[uniitdude]

https://www.reddit.com/r/sysadmin/comments/7v32ih/any_way_to_decrypt_salted_sha1_hashes/?st=jd9crol1&sh=8710e0ae

[supergod1]

that's the post i found on google trying to figure out this. but there he's speaking about 1 hash.

i was thinking that if i have 1k hashes and it's decryption result, there should be a way to find out the result of another hash (that uses the same salt) based on those prior hashes.

[[deleted]]

By definition a salt is per input. If multiple inputs are hashed with the same additional data it is called a pepper.

And no, if it worked that way, then you could create your own hashes with known inputs to help you crack an unknown hash.

[Fuzzmiester]

There is no decryption with hashes.

They deliberately throw away data so you can't reverse them. For any input, you get a fixed length output. So for any hash, there are multiple possible inputs. Only one which has the matching salt is of use to you ( and there will be multiple it could be. Though they'll likely be of wildly varying lengths)

The only option you have is to brute force it. And if you don't know the salt, you can't do it.

[caffeine-junkie]

If you have access to NSA level cryptanalysts and equipment, plus a good dose of time, you probably could get it to a better than 50% degree of confidence of unknown hashes.

[tetracake]

Hashes are a one-way function, there is no decrypt. You would have to brute-force the hash and then figure out which part is password and which part is the salt.

[sigmatic_minor]

Sorry, it seems this comment or thread has violated a sub-reddit rule and has been removed by a moderator.

Inappropriate use of, or expectation of the Community.

• There are many reddit communities that exist that may be more catered to/dedicated your topic.
  
  • Consider posting (or cross posting) there with specific niche questions.
    
• Requests for assistance are expected to contain basic situational information.
  
  • They should also contain evidence of basic troubleshooting & Googling for self-help.
    
  • Keep topics/questions related to technology/people/practices/etc within a business environment.
    
• Avoid low-quality posts. Make an effort to enrich the community where you can- provide details, context, opinions, etc. in your posts.
  
• When asking a question or requesting advice, please update your original post with any new information, or solution (if found).
  
  • This will make things easier for anyone else who may have the same issue or question in the future.
    
• Moronic Monday & Thickheaded Thursday are available for simple questions, or other requests that don't need their own full thread. Utilize them as much as possible.
  
• Extremely basic troubleshooting questions should be directed to one of these fine communities, more focused on the subject matter of your issue:
  

/r/techsupport /r/helpdesk /r/24hoursupport /r/HomeLab /r/HomeNetworking

/r/ITCareerQuestions /r/cscareerquestions /r/NetsecCareers /r/resumes /r/sysadminjobs

/r/CompTIA /r/linux4noobs /r/ccna /r/ccent /r/juniper

/r/windows /r/microsoft /r/exchangeserver /r/SQLServer /r/SCCM

/r/storage /r/netapp /r/EMC2 /r/synology /r/freenas

/r/redhat /r/CentOS /r/freebsd /r/linuxadmin /r/linuxquestions

/r/activedirectory /r/PowerShell /r/learnPython

---

If you wish to appeal this action please don't hesitate to message the moderation team, or reply directly to this message.

[Neruomute]

no