Added hash mode 18500 sha1(md5(md5($pass)))

closes hashcat/hashcat#1652

OpenCL/m18500_a0-pure.cl

@@ -0,0 +1,273 @@
+/**
+ * Author......: See docs/credits.txt
+ * License.....: MIT
+ */
+
+//#define NEW_SIMD_CODE
+
+#include "inc_vendor.cl"
+#include "inc_hash_constants.h"
+#include "inc_hash_functions.cl"
+#include "inc_types.cl"
+#include "inc_common.cl"
+#include "inc_rp.h"
+#include "inc_rp.cl"
+#include "inc_scalar.cl"
+#include "inc_hash_md5.cl"
+#include "inc_hash_sha1.cl"
+
+#if   VECT_SIZE == 1
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i)])
+#elif VECT_SIZE == 2
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1])
+#elif VECT_SIZE == 4
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3])
+#elif VECT_SIZE == 8
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3], l_bin2asc[(i).s4], l_bin2asc[(i).s5], l_bin2asc[(i).s6], l_bin2asc[(i).s7])
+#elif VECT_SIZE == 16
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3], l_bin2asc[(i).s4], l_bin2asc[(i).s5], l_bin2asc[(i).s6], l_bin2asc[(i).s7], l_bin2asc[(i).s8], l_bin2asc[(i).s9], l_bin2asc[(i).sa], l_bin2asc[(i).sb], l_bin2asc[(i).sc], l_bin2asc[(i).sd], l_bin2asc[(i).se], l_bin2asc[(i).sf])
+#endif
+
+__kernel void m18500_mxx (KERN_ATTR_RULES ())
+{
+  /**
+   * modifier
+   */
+
+  const u64 lid = get_local_id (0);
+  const u64 gid = get_global_id (0);
+  const u64 lsz = get_local_size (0);
+
+  __local u32 l_bin2asc[256];
+
+  for (MAYBE_VOLATILE u32 i = lid; i < 256; i += lsz)
+  {
+    const u32 i0 = (i >> 0) & 15;
+    const u32 i1 = (i >> 4) & 15;
+
+    l_bin2asc[i] = ((i0 < 10) ? '0' + i0 : 'a' - 10 + i0) << 8
+                 | ((i1 < 10) ? '0' + i1 : 'a' - 10 + i1) << 0;
+  }
+
+  barrier (CLK_LOCAL_MEM_FENCE);
+
+  if (gid >= gid_max) return;
+
+  /**
+   * base
+   */
+
+  COPY_PW (pws[gid]);
+
+  /**
+   * loop
+   */
+
+  for (u32 il_pos = 0; il_pos < il_cnt; il_pos++)
+  {
+    pw_t tmp = PASTE_PW;
+
+    tmp.pw_len = apply_rules (rules_buf[il_pos].cmds, tmp.i, tmp.pw_len);
+
+    md5_ctx_t ctx0;
+
+    md5_init (&ctx0);
+
+    md5_update (&ctx0, tmp.i, tmp.pw_len);
+
+    md5_final (&ctx0);
+
+    const u32 a = ctx0.h[0];
+    const u32 b = ctx0.h[1];
+    const u32 c = ctx0.h[2];
+    const u32 d = ctx0.h[3];
+
+    md5_ctx_t ctx1;
+
+    md5_init (&ctx1);
+
+    ctx1.w0[0] = uint_to_hex_lower8 ((a >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((a >>  8) & 255) << 16;
+    ctx1.w0[1] = uint_to_hex_lower8 ((a >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((a >> 24) & 255) << 16;
+    ctx1.w0[2] = uint_to_hex_lower8 ((b >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((b >>  8) & 255) << 16;
+    ctx1.w0[3] = uint_to_hex_lower8 ((b >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((b >> 24) & 255) << 16;
+    ctx1.w1[0] = uint_to_hex_lower8 ((c >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((c >>  8) & 255) << 16;
+    ctx1.w1[1] = uint_to_hex_lower8 ((c >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((c >> 24) & 255) << 16;
+    ctx1.w1[2] = uint_to_hex_lower8 ((d >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((d >>  8) & 255) << 16;
+    ctx1.w1[3] = uint_to_hex_lower8 ((d >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((d >> 24) & 255) << 16;
+    ctx1.len = 32;
+
+    md5_final (&ctx1);
+
+    const u32 e = ctx1.h[0];
+    const u32 f = ctx1.h[1];
+    const u32 g = ctx1.h[2];
+    const u32 h = ctx1.h[3];
+
+    sha1_ctx_t ctx2;
+
+    sha1_init (&ctx2);
+
+    ctx2.w0[0] = swap32(uint_to_hex_lower8 ((e >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >>  8) & 255) << 16);
+    ctx2.w0[1] = swap32(uint_to_hex_lower8 ((e >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >> 24) & 255) << 16);
+    ctx2.w0[2] = swap32(uint_to_hex_lower8 ((f >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >>  8) & 255) << 16);
+    ctx2.w0[3] = swap32(uint_to_hex_lower8 ((f >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >> 24) & 255) << 16);
+    ctx2.w1[0] = swap32(uint_to_hex_lower8 ((g >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >>  8) & 255) << 16);
+    ctx2.w1[1] = swap32(uint_to_hex_lower8 ((g >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >> 24) & 255) << 16);
+    ctx2.w1[2] = swap32(uint_to_hex_lower8 ((h >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >>  8) & 255) << 16);
+    ctx2.w1[3] = swap32(uint_to_hex_lower8 ((h >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >> 24) & 255) << 16);
+    ctx2.len = 32;
+
+    sha1_final (&ctx2);
+
+    const u32 r0 = ctx2.h[DGST_R0];
+    const u32 r1 = ctx2.h[DGST_R1];
+    const u32 r2 = ctx2.h[DGST_R2];
+    const u32 r3 = ctx2.h[DGST_R3];
+
+    COMPARE_M_SCALAR (r0, r1, r2, r3);
+  }
+}
+
+__kernel void m18500_sxx (KERN_ATTR_RULES ())
+{
+  /**
+   * modifier
+   */
+
+  const u64 lid = get_local_id (0);
+  const u64 gid = get_global_id (0);
+  const u64 lsz = get_local_size (0);
+
+  __local u32 l_bin2asc[256];
+
+  for (MAYBE_VOLATILE u32 i = lid; i < 256; i += lsz)
+  {
+    const u32 i0 = (i >> 0) & 15;
+    const u32 i1 = (i >> 4) & 15;
+
+    l_bin2asc[i] = ((i0 < 10) ? '0' + i0 : 'a' - 10 + i0) << 8
+                 | ((i1 < 10) ? '0' + i1 : 'a' - 10 + i1) << 0;
+  }
+
+  barrier (CLK_LOCAL_MEM_FENCE);
+
+  if (gid >= gid_max) return;
+
+  /**
+   * digest
+   */
+
+  const u32 search[4] =
+  {
+    digests_buf[digests_offset].digest_buf[DGST_R0],
+    digests_buf[digests_offset].digest_buf[DGST_R1],
+    digests_buf[digests_offset].digest_buf[DGST_R2],
+    digests_buf[digests_offset].digest_buf[DGST_R3]
+  };
+
+  /**
+   * base
+   */
+
+  COPY_PW (pws[gid]);
+
+  /**
+   * loop
+   */
+
+  for (u32 il_pos = 0; il_pos < il_cnt; il_pos++)
+  {
+    pw_t tmp = PASTE_PW;
+
+    tmp.pw_len = apply_rules (rules_buf[il_pos].cmds, tmp.i, tmp.pw_len);
+
+    md5_ctx_t ctx0;
+
+    md5_init (&ctx0);
+
+    md5_update (&ctx0, tmp.i, tmp.pw_len);
+
+    md5_final (&ctx0);
+
+    const u32 a = ctx0.h[0];
+    const u32 b = ctx0.h[1];
+    const u32 c = ctx0.h[2];
+    const u32 d = ctx0.h[3];
+
+    md5_ctx_t ctx1;
+
+    md5_init (&ctx1);
+
+    ctx1.w0[0] = uint_to_hex_lower8 ((a >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((a >>  8) & 255) << 16;
+    ctx1.w0[1] = uint_to_hex_lower8 ((a >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((a >> 24) & 255) << 16;
+    ctx1.w0[2] = uint_to_hex_lower8 ((b >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((b >>  8) & 255) << 16;
+    ctx1.w0[3] = uint_to_hex_lower8 ((b >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((b >> 24) & 255) << 16;
+    ctx1.w1[0] = uint_to_hex_lower8 ((c >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((c >>  8) & 255) << 16;
+    ctx1.w1[1] = uint_to_hex_lower8 ((c >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((c >> 24) & 255) << 16;
+    ctx1.w1[2] = uint_to_hex_lower8 ((d >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((d >>  8) & 255) << 16;
+    ctx1.w1[3] = uint_to_hex_lower8 ((d >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((d >> 24) & 255) << 16;
+    ctx1.len = 32;
+
+    md5_final (&ctx1);
+
+    const u32 e = ctx1.h[0];
+    const u32 f = ctx1.h[1];
+    const u32 g = ctx1.h[2];
+    const u32 h = ctx1.h[3];
+
+    sha1_ctx_t ctx2;
+
+    sha1_init (&ctx2);
+
+    ctx2.w0[0] = swap32(uint_to_hex_lower8 ((e >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >>  8) & 255) << 16);
+    ctx2.w0[1] = swap32(uint_to_hex_lower8 ((e >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >> 24) & 255) << 16);
+    ctx2.w0[2] = swap32(uint_to_hex_lower8 ((f >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >>  8) & 255) << 16);
+    ctx2.w0[3] = swap32(uint_to_hex_lower8 ((f >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >> 24) & 255) << 16);
+    ctx2.w1[0] = swap32(uint_to_hex_lower8 ((g >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >>  8) & 255) << 16);
+    ctx2.w1[1] = swap32(uint_to_hex_lower8 ((g >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >> 24) & 255) << 16);
+    ctx2.w1[2] = swap32(uint_to_hex_lower8 ((h >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >>  8) & 255) << 16);
+    ctx2.w1[3] = swap32(uint_to_hex_lower8 ((h >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >> 24) & 255) << 16);
+    ctx2.len = 32;
+
+    sha1_final (&ctx2);
+
+    const u32 r0 = ctx2.h[DGST_R0];
+    const u32 r1 = ctx2.h[DGST_R1];
+    const u32 r2 = ctx2.h[DGST_R2];
+    const u32 r3 = ctx2.h[DGST_R3];
+
+    COMPARE_S_SCALAR (r0, r1, r2, r3);
+  }
+}

OpenCL/m18500_a1-pure.cl

@@ -0,0 +1,271 @@
+/**
+ * Author......: See docs/credits.txt
+ * License.....: MIT
+ */
+
+//#define NEW_SIMD_CODE
+
+#include "inc_vendor.cl"
+#include "inc_hash_constants.h"
+#include "inc_hash_functions.cl"
+#include "inc_types.cl"
+#include "inc_common.cl"
+#include "inc_rp.h"
+#include "inc_rp.cl"
+#include "inc_scalar.cl"
+#include "inc_hash_md5.cl"
+#include "inc_hash_sha1.cl"
+
+#if   VECT_SIZE == 1
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i)])
+#elif VECT_SIZE == 2
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1])
+#elif VECT_SIZE == 4
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3])
+#elif VECT_SIZE == 8
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3], l_bin2asc[(i).s4], l_bin2asc[(i).s5], l_bin2asc[(i).s6], l_bin2asc[(i).s7])
+#elif VECT_SIZE == 16
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3], l_bin2asc[(i).s4], l_bin2asc[(i).s5], l_bin2asc[(i).s6], l_bin2asc[(i).s7], l_bin2asc[(i).s8], l_bin2asc[(i).s9], l_bin2asc[(i).sa], l_bin2asc[(i).sb], l_bin2asc[(i).sc], l_bin2asc[(i).sd], l_bin2asc[(i).se], l_bin2asc[(i).sf])
+#endif
+
+__kernel void m18500_mxx (KERN_ATTR_RULES ())
+{
+  /**
+   * modifier
+   */
+
+  const u64 lid = get_local_id (0);
+  const u64 gid = get_global_id (0);
+  const u64 lsz = get_local_size (0);
+
+  __local u32 l_bin2asc[256];
+
+  for (MAYBE_VOLATILE u32 i = lid; i < 256; i += lsz)
+  {
+    const u32 i0 = (i >> 0) & 15;
+    const u32 i1 = (i >> 4) & 15;
+
+    l_bin2asc[i] = ((i0 < 10) ? '0' + i0 : 'a' - 10 + i0) << 8
+                 | ((i1 < 10) ? '0' + i1 : 'a' - 10 + i1) << 0;
+  }
+
+  barrier (CLK_LOCAL_MEM_FENCE);
+
+  if (gid >= gid_max) return;
+
+  /**
+   * base
+   */
+
+  md5_ctx_t ctx;
+
+  md5_init (&ctx);
+
+  md5_update_global (&ctx, pws[gid].i, pws[gid].pw_len & 255);
+
+  /**
+   * loop
+   */
+
+  for (u32 il_pos = 0; il_pos < il_cnt; il_pos++)
+  {
+
+    md5_ctx_t ctx0 = ctx;
+
+    md5_update_global (&ctx0, combs_buf[il_pos].i, combs_buf[il_pos].pw_len & 255);
+
+    md5_final (&ctx0);
+
+    const u32 a = ctx0.h[0];
+    const u32 b = ctx0.h[1];
+    const u32 c = ctx0.h[2];
+    const u32 d = ctx0.h[3];
+
+    md5_ctx_t ctx1;
+
+    md5_init (&ctx1);
+
+    ctx1.w0[0] = uint_to_hex_lower8 ((a >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((a >>  8) & 255) << 16;
+    ctx1.w0[1] = uint_to_hex_lower8 ((a >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((a >> 24) & 255) << 16;
+    ctx1.w0[2] = uint_to_hex_lower8 ((b >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((b >>  8) & 255) << 16;
+    ctx1.w0[3] = uint_to_hex_lower8 ((b >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((b >> 24) & 255) << 16;
+    ctx1.w1[0] = uint_to_hex_lower8 ((c >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((c >>  8) & 255) << 16;
+    ctx1.w1[1] = uint_to_hex_lower8 ((c >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((c >> 24) & 255) << 16;
+    ctx1.w1[2] = uint_to_hex_lower8 ((d >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((d >>  8) & 255) << 16;
+    ctx1.w1[3] = uint_to_hex_lower8 ((d >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((d >> 24) & 255) << 16;
+    ctx1.len = 32;
+
+    md5_final (&ctx1);
+
+    const u32 e = ctx1.h[0];
+    const u32 f = ctx1.h[1];
+    const u32 g = ctx1.h[2];
+    const u32 h = ctx1.h[3];
+
+    sha1_ctx_t ctx2;
+
+    sha1_init (&ctx2);
+
+    ctx2.w0[0] = swap32(uint_to_hex_lower8 ((e >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >>  8) & 255) << 16);
+    ctx2.w0[1] = swap32(uint_to_hex_lower8 ((e >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >> 24) & 255) << 16);
+    ctx2.w0[2] = swap32(uint_to_hex_lower8 ((f >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >>  8) & 255) << 16);
+    ctx2.w0[3] = swap32(uint_to_hex_lower8 ((f >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >> 24) & 255) << 16);
+    ctx2.w1[0] = swap32(uint_to_hex_lower8 ((g >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >>  8) & 255) << 16);
+    ctx2.w1[1] = swap32(uint_to_hex_lower8 ((g >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >> 24) & 255) << 16);
+    ctx2.w1[2] = swap32(uint_to_hex_lower8 ((h >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >>  8) & 255) << 16);
+    ctx2.w1[3] = swap32(uint_to_hex_lower8 ((h >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >> 24) & 255) << 16);
+    ctx2.len = 32;
+
+    sha1_final (&ctx2);
+
+    const u32 r0 = ctx2.h[DGST_R0];
+    const u32 r1 = ctx2.h[DGST_R1];
+    const u32 r2 = ctx2.h[DGST_R2];
+    const u32 r3 = ctx2.h[DGST_R3];
+
+    COMPARE_M_SCALAR (r0, r1, r2, r3);
+  }
+}
+
+__kernel void m18500_sxx (KERN_ATTR_RULES ())
+{
+  /**
+   * modifier
+   */
+
+  const u64 lid = get_local_id (0);
+  const u64 gid = get_global_id (0);
+  const u64 lsz = get_local_size (0);
+
+  __local u32 l_bin2asc[256];
+
+  for (MAYBE_VOLATILE u32 i = lid; i < 256; i += lsz)
+  {
+    const u32 i0 = (i >> 0) & 15;
+    const u32 i1 = (i >> 4) & 15;
+
+    l_bin2asc[i] = ((i0 < 10) ? '0' + i0 : 'a' - 10 + i0) << 8
+                 | ((i1 < 10) ? '0' + i1 : 'a' - 10 + i1) << 0;
+  }
+
+  barrier (CLK_LOCAL_MEM_FENCE);
+
+  if (gid >= gid_max) return;
+
+  /**
+   * digest
+   */
+
+  const u32 search[4] =
+  {
+    digests_buf[digests_offset].digest_buf[DGST_R0],
+    digests_buf[digests_offset].digest_buf[DGST_R1],
+    digests_buf[digests_offset].digest_buf[DGST_R2],
+    digests_buf[digests_offset].digest_buf[DGST_R3]
+  };
+
+  /**
+   * base
+   */
+
+  md5_ctx_t ctx;
+
+  md5_init (&ctx);
+
+  md5_update_global (&ctx, pws[gid].i, pws[gid].pw_len & 255);
+
+  /**
+   * loop
+   */
+
+  for (u32 il_pos = 0; il_pos < il_cnt; il_pos++)
+  {
+
+    md5_ctx_t ctx0 = ctx;
+
+    md5_update_global (&ctx0, combs_buf[il_pos].i, combs_buf[il_pos].pw_len & 255);
+
+    md5_final (&ctx0);
+
+    const u32 a = ctx0.h[0];
+    const u32 b = ctx0.h[1];
+    const u32 c = ctx0.h[2];
+    const u32 d = ctx0.h[3];
+
+    md5_ctx_t ctx1;
+
+    md5_init (&ctx1);
+
+    ctx1.w0[0] = uint_to_hex_lower8 ((a >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((a >>  8) & 255) << 16;
+    ctx1.w0[1] = uint_to_hex_lower8 ((a >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((a >> 24) & 255) << 16;
+    ctx1.w0[2] = uint_to_hex_lower8 ((b >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((b >>  8) & 255) << 16;
+    ctx1.w0[3] = uint_to_hex_lower8 ((b >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((b >> 24) & 255) << 16;
+    ctx1.w1[0] = uint_to_hex_lower8 ((c >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((c >>  8) & 255) << 16;
+    ctx1.w1[1] = uint_to_hex_lower8 ((c >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((c >> 24) & 255) << 16;
+    ctx1.w1[2] = uint_to_hex_lower8 ((d >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((d >>  8) & 255) << 16;
+    ctx1.w1[3] = uint_to_hex_lower8 ((d >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((d >> 24) & 255) << 16;
+    ctx1.len = 32;
+
+    md5_final (&ctx1);
+
+    const u32 e = ctx1.h[0];
+    const u32 f = ctx1.h[1];
+    const u32 g = ctx1.h[2];
+    const u32 h = ctx1.h[3];
+
+    sha1_ctx_t ctx2;
+
+    sha1_init (&ctx2);
+
+    ctx2.w0[0] = swap32(uint_to_hex_lower8 ((e >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >>  8) & 255) << 16);
+    ctx2.w0[1] = swap32(uint_to_hex_lower8 ((e >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >> 24) & 255) << 16);
+    ctx2.w0[2] = swap32(uint_to_hex_lower8 ((f >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >>  8) & 255) << 16);
+    ctx2.w0[3] = swap32(uint_to_hex_lower8 ((f >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >> 24) & 255) << 16);
+    ctx2.w1[0] = swap32(uint_to_hex_lower8 ((g >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >>  8) & 255) << 16);
+    ctx2.w1[1] = swap32(uint_to_hex_lower8 ((g >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >> 24) & 255) << 16);
+    ctx2.w1[2] = swap32(uint_to_hex_lower8 ((h >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >>  8) & 255) << 16);
+    ctx2.w1[3] = swap32(uint_to_hex_lower8 ((h >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >> 24) & 255) << 16);
+    ctx2.len = 32;
+
+    sha1_final (&ctx2);
+
+    const u32 r0 = ctx2.h[DGST_R0];
+    const u32 r1 = ctx2.h[DGST_R1];
+    const u32 r2 = ctx2.h[DGST_R2];
+    const u32 r3 = ctx2.h[DGST_R3];
+
+    COMPARE_S_SCALAR (r0, r1, r2, r3);
+  }
+}

OpenCL/m18500_a3-pure.cl

@@ -0,0 +1,293 @@
+/**
+ * Author......: See docs/credits.txt
+ * License.....: MIT
+ */
+
+//#define NEW_SIMD_CODE
+
+#include "inc_vendor.cl"
+#include "inc_hash_constants.h"
+#include "inc_hash_functions.cl"
+#include "inc_types.cl"
+#include "inc_common.cl"
+#include "inc_simd.cl"
+#include "inc_hash_md5.cl"
+#include "inc_hash_sha1.cl"
+
+#if   VECT_SIZE == 1
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i)])
+#elif VECT_SIZE == 2
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1])
+#elif VECT_SIZE == 4
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3])
+#elif VECT_SIZE == 8
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3], l_bin2asc[(i).s4], l_bin2asc[(i).s5], l_bin2asc[(i).s6], l_bin2asc[(i).s7])
+#elif VECT_SIZE == 16
+#define uint_to_hex_lower8(i) (u32x) (l_bin2asc[(i).s0], l_bin2asc[(i).s1], l_bin2asc[(i).s2], l_bin2asc[(i).s3], l_bin2asc[(i).s4], l_bin2asc[(i).s5], l_bin2asc[(i).s6], l_bin2asc[(i).s7], l_bin2asc[(i).s8], l_bin2asc[(i).s9], l_bin2asc[(i).sa], l_bin2asc[(i).sb], l_bin2asc[(i).sc], l_bin2asc[(i).sd], l_bin2asc[(i).se], l_bin2asc[(i).sf])
+#endif
+
+__kernel void m18500_mxx (KERN_ATTR_VECTOR ())
+{
+  /**
+   * modifier
+   */
+
+  const u64 lid = get_local_id (0);
+  const u64 gid = get_global_id (0);
+  const u64 lsz = get_local_size (0);
+
+  __local u32 l_bin2asc[256];
+
+  for (MAYBE_VOLATILE u32 i = lid; i < 256; i += lsz)
+  {
+    const u32 i0 = (i >> 0) & 15;
+    const u32 i1 = (i >> 4) & 15;
+
+    l_bin2asc[i] = ((i0 < 10) ? '0' + i0 : 'a' - 10 + i0) << 8
+                 | ((i1 < 10) ? '0' + i1 : 'a' - 10 + i1) << 0;
+  }
+
+  barrier (CLK_LOCAL_MEM_FENCE);
+
+  if (gid >= gid_max) return;
+
+  /**
+   * base
+   */
+
+  const u32 pw_len = pws[gid].pw_len & 255;
+
+  u32x w[64] = { 0 };
+
+  for (int i = 0, idx = 0; i < pw_len; i += 4, idx += 1)
+  {
+    w[idx] = pws[gid].i[idx];
+  }
+
+  /**
+   * loop
+   */
+
+  u32x w0l = w[0];
+
+  for (u32 il_pos = 0; il_pos < il_cnt; il_pos++)
+  {
+    const u32x w0r = words_buf_r[il_pos / VECT_SIZE];
+
+    const u32x w0 = w0l | w0r;
+
+    w[0] = w0;
+
+    md5_ctx_vector_t ctx0;
+
+    md5_init_vector (&ctx0);
+
+    md5_update_vector (&ctx0, w, pw_len);
+
+    md5_final_vector (&ctx0);
+
+    const u32 a = ctx0.h[0];
+    const u32 b = ctx0.h[1];
+    const u32 c = ctx0.h[2];
+    const u32 d = ctx0.h[3];
+
+    md5_ctx_t ctx1;
+
+    md5_init (&ctx1);
+
+    ctx1.w0[0] = uint_to_hex_lower8 ((a >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((a >>  8) & 255) << 16;
+    ctx1.w0[1] = uint_to_hex_lower8 ((a >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((a >> 24) & 255) << 16;
+    ctx1.w0[2] = uint_to_hex_lower8 ((b >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((b >>  8) & 255) << 16;
+    ctx1.w0[3] = uint_to_hex_lower8 ((b >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((b >> 24) & 255) << 16;
+    ctx1.w1[0] = uint_to_hex_lower8 ((c >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((c >>  8) & 255) << 16;
+    ctx1.w1[1] = uint_to_hex_lower8 ((c >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((c >> 24) & 255) << 16;
+    ctx1.w1[2] = uint_to_hex_lower8 ((d >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((d >>  8) & 255) << 16;
+    ctx1.w1[3] = uint_to_hex_lower8 ((d >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((d >> 24) & 255) << 16;
+    ctx1.len = 32;
+
+    md5_final (&ctx1);
+
+    const u32 e = ctx1.h[0];
+    const u32 f = ctx1.h[1];
+    const u32 g = ctx1.h[2];
+    const u32 h = ctx1.h[3];
+
+    sha1_ctx_t ctx2;
+
+    sha1_init (&ctx2);
+
+    ctx2.w0[0] = swap32(uint_to_hex_lower8 ((e >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >>  8) & 255) << 16);
+    ctx2.w0[1] = swap32(uint_to_hex_lower8 ((e >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >> 24) & 255) << 16);
+    ctx2.w0[2] = swap32(uint_to_hex_lower8 ((f >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >>  8) & 255) << 16);
+    ctx2.w0[3] = swap32(uint_to_hex_lower8 ((f >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >> 24) & 255) << 16);
+    ctx2.w1[0] = swap32(uint_to_hex_lower8 ((g >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >>  8) & 255) << 16);
+    ctx2.w1[1] = swap32(uint_to_hex_lower8 ((g >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >> 24) & 255) << 16);
+    ctx2.w1[2] = swap32(uint_to_hex_lower8 ((h >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >>  8) & 255) << 16);
+    ctx2.w1[3] = swap32(uint_to_hex_lower8 ((h >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >> 24) & 255) << 16);
+    ctx2.len = 32;
+
+    sha1_final (&ctx2);
+
+    const u32 r0 = ctx2.h[DGST_R0];
+    const u32 r1 = ctx2.h[DGST_R1];
+    const u32 r2 = ctx2.h[DGST_R2];
+    const u32 r3 = ctx2.h[DGST_R3];
+
+    COMPARE_M_SIMD (r0, r1, r2, r3);
+  }
+}
+
+__kernel void m18500_sxx (KERN_ATTR_VECTOR ())
+{
+  /**
+   * modifier
+   */
+
+  const u64 lid = get_local_id (0);
+  const u64 gid = get_global_id (0);
+  const u64 lsz = get_local_size (0);
+
+  __local u32 l_bin2asc[256];
+
+  for (MAYBE_VOLATILE u32 i = lid; i < 256; i += lsz)
+  {
+    const u32 i0 = (i >> 0) & 15;
+    const u32 i1 = (i >> 4) & 15;
+
+    l_bin2asc[i] = ((i0 < 10) ? '0' + i0 : 'a' - 10 + i0) << 8
+                 | ((i1 < 10) ? '0' + i1 : 'a' - 10 + i1) << 0;
+  }
+
+  barrier (CLK_LOCAL_MEM_FENCE);
+
+  if (gid >= gid_max) return;
+
+  /**
+   * digest
+   */
+
+  const u32 search[4] =
+  {
+    digests_buf[digests_offset].digest_buf[DGST_R0],
+    digests_buf[digests_offset].digest_buf[DGST_R1],
+    digests_buf[digests_offset].digest_buf[DGST_R2],
+    digests_buf[digests_offset].digest_buf[DGST_R3]
+  };
+
+  /**
+   * base
+   */
+
+  const u32 pw_len = pws[gid].pw_len & 255;
+
+  u32x w[64] = { 0 };
+
+  for (int i = 0, idx = 0; i < pw_len; i += 4, idx += 1)
+  {
+    w[idx] = pws[gid].i[idx];
+  }
+
+  /**
+   * loop
+   */
+
+  u32x w0l = w[0];
+
+  for (u32 il_pos = 0; il_pos < il_cnt; il_pos++)
+  {
+    const u32x w0r = words_buf_r[il_pos / VECT_SIZE];
+
+    const u32x w0 = w0l | w0r;
+
+    w[0] = w0;
+
+    md5_ctx_t ctx0;
+
+    md5_init (&ctx0);
+
+    md5_update (&ctx0, w, pw_len);
+
+    md5_final (&ctx0);
+
+    const u32 a = ctx0.h[0];
+    const u32 b = ctx0.h[1];
+    const u32 c = ctx0.h[2];
+    const u32 d = ctx0.h[3];
+
+    md5_ctx_t ctx1;
+
+    md5_init (&ctx1);
+
+    ctx1.w0[0] = uint_to_hex_lower8 ((a >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((a >>  8) & 255) << 16;
+    ctx1.w0[1] = uint_to_hex_lower8 ((a >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((a >> 24) & 255) << 16;
+    ctx1.w0[2] = uint_to_hex_lower8 ((b >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((b >>  8) & 255) << 16;
+    ctx1.w0[3] = uint_to_hex_lower8 ((b >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((b >> 24) & 255) << 16;
+    ctx1.w1[0] = uint_to_hex_lower8 ((c >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((c >>  8) & 255) << 16;
+    ctx1.w1[1] = uint_to_hex_lower8 ((c >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((c >> 24) & 255) << 16;
+    ctx1.w1[2] = uint_to_hex_lower8 ((d >>  0) & 255) <<  0
+               | uint_to_hex_lower8 ((d >>  8) & 255) << 16;
+    ctx1.w1[3] = uint_to_hex_lower8 ((d >> 16) & 255) <<  0
+               | uint_to_hex_lower8 ((d >> 24) & 255) << 16;
+    ctx1.len = 32;
+
+    md5_final (&ctx1);
+
+    const u32 e = ctx1.h[0];
+    const u32 f = ctx1.h[1];
+    const u32 g = ctx1.h[2];
+    const u32 h = ctx1.h[3];
+
+    sha1_ctx_t ctx2;
+
+    sha1_init (&ctx2);
+
+    ctx2.w0[0] = swap32(uint_to_hex_lower8 ((e >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >>  8) & 255) << 16);
+    ctx2.w0[1] = swap32(uint_to_hex_lower8 ((e >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((e >> 24) & 255) << 16);
+    ctx2.w0[2] = swap32(uint_to_hex_lower8 ((f >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >>  8) & 255) << 16);
+    ctx2.w0[3] = swap32(uint_to_hex_lower8 ((f >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((f >> 24) & 255) << 16);
+    ctx2.w1[0] = swap32(uint_to_hex_lower8 ((g >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >>  8) & 255) << 16);
+    ctx2.w1[1] = swap32(uint_to_hex_lower8 ((g >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((g >> 24) & 255) << 16);
+    ctx2.w1[2] = swap32(uint_to_hex_lower8 ((h >>  0) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >>  8) & 255) << 16);
+    ctx2.w1[3] = swap32(uint_to_hex_lower8 ((h >> 16) & 255) <<  0
+                      | uint_to_hex_lower8 ((h >> 24) & 255) << 16);
+    ctx2.len = 32;
+
+    sha1_final (&ctx2);
+
+    const u32 r0 = ctx2.h[DGST_R0];
+    const u32 r1 = ctx2.h[DGST_R1];
+    const u32 r2 = ctx2.h[DGST_R2];
+    const u32 r3 = ctx2.h[DGST_R3];
+
+    COMPARE_S_SIMD (r0, r1, r2, r3);
+  }
+}

docs/changes.txt

@@ -5,6 +5,7 @@
 ##
 
 - Added hash-mode 18400 (Open Document Format (ODF) 1.2 (SHA-256, AES))
+- Added hash-mode 18500 sha1(md5(md5($pass)))
 
 ##
 ## Bugs
@@ -17,6 +18,7 @@
 ##
 
 - Tests: Added hash-mode 18400 (Open Document Format (ODF) 1.2 (SHA-256, AES))
+- Tests: Added hash-mode 18500 sha1(md5(md5($pass)))
 
 * changes v5.0.0 -> v5.1.0
 

extra/tab_completion/hashcat.sh

@@ -176,7 +176,7 @@ _hashcat ()
 {
   local VERSION=5.1.0
 
-  local HASH_MODES="0 10 11 12 20 21 22 23 30 40 50 60 100 101 110 111 112 120 121 122 124 130 131 132 133 140 141 150 160 200 300 400 500 501 600 900 1000 1100 1400 1410 1411 1420 1421 1430 1440 1441 1450 1460 1500 1600 1700 1710 1711 1720 1722 1730 1731 1740 1750 1760 1800 2100 2400 2410 2500 2501 2600 2611 2612 2711 2811 3000 3100 3200 3710 3711 3800 3910 4010 4110 4300 4400 4500 4520 4521 4522 4700 4800 4900 5100 5200 5300 5400 5500 5600 5700 5800 6000 6100 6211 6212 6213 6221 6222 6223 6231 6232 6233 6241 6242 6243 6300 6400 6500 6600 6700 6800 6900 7000 7100 7200 7300 7400 7500 7700 7800 7900 8000 8100 8200 8300 8400 8500 8600 8700 8800 8900 9000 9100 9200 9300 9400 9500 9600 9700 9710 9720 9800 9810 9820 9900 10000 10100 10200 10300 10400 10410 10420 10500 10600 10700 10800 10900 11000 11100 11200 11300 11400 11500 11600 11700 11800 11850 11860 11900 12000 12001 12100 12200 12300 12400 12500 12600 12700 12800 12900 13000 13100 13200 13300 13400 13500 13600 13800 13900 14000 14100 14700 14800 14900 15000 15100 15200 15300 15400 15500 15600 15700 15900 16000 16100 16200 16300 16400 16500 16600 16700 16800 16801 16900 17300 17400 17500 17600 17700 17800 17900 18000 18100 18200 18300 18400"
+  local HASH_MODES="0 10 11 12 20 21 22 23 30 40 50 60 100 101 110 111 112 120 121 122 124 130 131 132 133 140 141 150 160 200 300 400 500 501 600 900 1000 1100 1400 1410 1411 1420 1421 1430 1440 1441 1450 1460 1500 1600 1700 1710 1711 1720 1722 1730 1731 1740 1750 1760 1800 2100 2400 2410 2500 2501 2600 2611 2612 2711 2811 3000 3100 3200 3710 3711 3800 3910 4010 4110 4300 4400 4500 4520 4521 4522 4700 4800 4900 5100 5200 5300 5400 5500 5600 5700 5800 6000 6100 6211 6212 6213 6221 6222 6223 6231 6232 6233 6241 6242 6243 6300 6400 6500 6600 6700 6800 6900 7000 7100 7200 7300 7400 7500 7700 7800 7900 8000 8100 8200 8300 8400 8500 8600 8700 8800 8900 9000 9100 9200 9300 9400 9500 9600 9700 9710 9720 9800 9810 9820 9900 10000 10100 10200 10300 10400 10410 10420 10500 10600 10700 10800 10900 11000 11100 11200 11300 11400 11500 11600 11700 11800 11850 11860 11900 12000 12001 12100 12200 12300 12400 12500 12600 12700 12800 12900 13000 13100 13200 13300 13400 13500 13600 13800 13900 14000 14100 14700 14800 14900 15000 15100 15200 15300 15400 15500 15600 15700 15900 16000 16100 16200 16300 16400 16500 16600 16700 16800 16801 16900 17300 17400 17500 17600 17700 17800 17900 18000 18100 18200 18300 18400 18500"
   local ATTACK_MODES="0 1 3 6 7"
   local HCCAPX_MESSAGE_PAIRS="0 1 2 3 4 5"
   local OUTFILE_FORMATS="1 2 3 4 5 6 7 8 9 10 11 12 13 14 15"

include/interface.h

@@ -1397,6 +1397,7 @@ typedef enum kern_type
   KERN_TYPE_KRB5ASREP               = 18200,
   KERN_TYPE_APFS                    = 18300,
   KERN_TYPE_ODF12                   = 18400,
+  KERN_TYPE_SHA1_DOUBLE_MD5         = 18500,
   KERN_TYPE_PLAINTEXT               = 99999,
 
 } kern_type_t;

src/interface.c

@@ -300,6 +300,7 @@ static const char *ST_HASH_18100 = "597056:3600";
 static const char *ST_HASH_18200 = "$krb5asrep$23$user@domain.com:3e156ada591263b8aab0965f5aebd837$007497cb51b6c8116d6407a782ea0e1c5402b17db7afa6b05a6d30ed164a9933c754d720e279c6c573679bd27128fe77e5fea1f72334c1193c8ff0b370fadc6368bf2d49bbfdba4c5dccab95e8c8ebfdc75f438a0797dbfb2f8a1a5f4c423f9bfc1fea483342a11bd56a216f4d5158ccc4b224b52894fadfba3957dfe4b6b8f5f9f9fe422811a314768673e0c924340b8ccb84775ce9defaa3baa0910b676ad0036d13032b0dd94e3b13903cc738a7b6d00b0b3c210d1f972a6c7cae9bd3c959acf7565be528fc179118f28c679f6deeee1456f0781eb8154e18e49cb27b64bf74cd7112a0ebae2102ac";
 static const char *ST_HASH_18300 = "$fvde$2$16$58778104701476542047675521040224$20000$39602e86b7cea4a34f4ff69ff6ed706d68954ee474de1d2a9f6a6f2d24d172001e484c1d4eaa237d";
 static const char *ST_HASH_18400 = "$odf$*1*1*100000*32*751854d8b90731ce0579f96bea6f0d4ac2fb2f546b31f1b6af9a5f66952a0bf4*16*2185a966155baa9e2fb597298febecbc*16*c18eaae34bcbbe9119be017fe5f8b52d*0*051e0f1ce0e866f2b771029e03a6c7119aad132af54c4e45824f16f61f357a40407ab82744fe6370c7b2346075fcd4c2e58ab244411b3ab1d532a46e2321599ef13c3d3472fc2f14d480d8c33215e473da67f90540279d3ef1f62dde314fa222796046e496c951235ddf88aa754620b7810d22ebc8835c90dce9276946f52b8ea7d95d2f86e4cc725366a8b3edacc2ce88518e535991a5f84d5ea8795dc02bfb731b5f202ecaf7d4b245d928c4248709fcdf3fba2acf1a08be0c1eee7dbeda07e8c3a6983565635e99952b8ad79d31c965f245ae90b5cc3dba6387898c66fa35cad9ac9595c41b62e68efcdd73185b38e220cf004269b77ec6974474b03b7569afc3b503a2bf8b2d035756f3f4cb880d9ba815e5c944508a0bde214076c35bf0e0814a96d21ccaa744c9056948ed935209f5c7933841d2ede3d28dd84da89d477d4a0041ce6d8ddab891d929340db6daa921d69b46fd5aee306d0bcef88c38acbb495d0466df7e2f744e3d10201081215c02db5dd479a4cda15a3338969c7baec9d3d2c378a8dd30449319b149dc3b4e7f00996a59fcb5f243d0df2cbaf749241033f7865aefa960adfeb8ebf205b270f90b1f82c34f80d5a8a0db7aec89972a32f5daa2a73c5895d1fced01b3ab8e576bd2630eff01cad97781f4966d4b528e1b15f011f28ae907a352073c96b203adc7742d2b79b2e2f440b17e7856ae119e08d15d8bdf951f6d4a3f9b516da2d9a8f9dd93488f8e0119f3da19138ab787f0d7098a652cccd914aa0ff81d375bd6a5a165acc936f591639059287975cfc3ca4342e5f9501b3249a76d14e56d6d56b319e036bc0449ac7b5afa24ffbea11babed8183edf8d4fdca1c3f0d23bfd4a02797627d556634f1a9304e03737604bd86f6b5a26aa687d6df73383e0f7dfe62a131e8dbb8c3f4f13d24857dd29d76984eac6c45df7428fc79323ffa1f4e7962d705df74320141ed1f16d1ad483b872168df60315ffadbfa1b7f4afaed8a0017421bf5e05348cb5c707a5e852d6fee6077ec1c33bc707bcd97b7701ee05a03d6fa78b0d31c8c97ea16e0edf434961bd5cc7cbb7eb2553730f0405c9bd21cee09b3f7c1bc57779fdfc15f3935985737a1b522004c4436b631a39a66e8577a03f5020e6aa41952c0662c8c57f66caa483b47af38b8cb5d457245fd3241749e17433e6f929233e8862d7c584111b1991b2d6e94278e7e6e1908cee5a83d94c78b75a84a695d25aeb9fdde72174fe6dd75e8d406671f44892a385a4a1e249f61ebc993e985607423a0a5742e668d52c1ebf5cecae7c2b7908f4627b92ec49354a9ccff8cb5763ad074a00e65a485a41bf4c25ce7e6fae49358a58547b1c0ca79713e297310c0a367c3de196f1dd685ca4be643bdf1e4f6b034211d020557e37a3b6614d061010b4a3416b6b279728c245d3322";
+static const char *ST_HASH_18500 = "888a2ffcb3854fba0321110c5d0d434ad1aa2880";
 static const char *ST_HASH_99999 = "hashcat";
 
 static const char *OPTI_STR_OPTIMIZED_KERNEL     = "Optimized-Kernel";
@@ -563,6 +564,7 @@ static const char *HT_18100 = "TOTP (HMAC-SHA1)";
 static const char *HT_18200 = "Kerberos 5 AS-REP etype 23";
 static const char *HT_18300 = "Apple File System (APFS)";
 static const char *HT_18400 = "Open Document Format (ODF) 1.2 (SHA-256, AES)";
+static const char *HT_18500 = "sha1(md5(md5($pass)))";
 static const char *HT_99999 = "Plaintext";
 
 static const char *HT_00011 = "Joomla < 2.5.18";
@@ -19215,6 +19217,7 @@ const char *strhashtype (const u32 hash_mode)
     case 18200: return HT_18200;
     case 18300: return HT_18300;
     case 18400: return HT_18400;
+    case 18500: return HT_18500;
     case 99999: return HT_99999;
   }
 
@@ -28602,6 +28605,22 @@ int hashconfig_init (hashcat_ctx_t *hashcat_ctx)
                  hashconfig->dgst_pos2      = 2;
                  hashconfig->dgst_pos3      = 3;
                  hashconfig->st_hash        = ST_HASH_18400;
+                 hashconfig->st_pass        = ST_HASH_18500;
+                 break;
+
+    case 18500:  hashconfig->hash_type      = HASH_TYPE_SHA1;
+                 hashconfig->salt_type      = SALT_TYPE_NONE;
+                 hashconfig->attack_exec    = ATTACK_EXEC_INSIDE_KERNEL;
+                 hashconfig->opts_type      = OPTS_TYPE_ST_HEX;
+                 hashconfig->kern_type      = KERN_TYPE_SHA1_DOUBLE_MD5;
+                 hashconfig->dgst_size      = DGST_SIZE_4_5;
+                 hashconfig->parse_func     = sha1_parse_hash;
+                 hashconfig->opti_type      = OPTI_TYPE_NOT_SALTED;
+                 hashconfig->dgst_pos0      = 0;
+                 hashconfig->dgst_pos1      = 3;
+                 hashconfig->dgst_pos2      = 2;
+                 hashconfig->dgst_pos3      = 1;
+                 hashconfig->st_hash        = ST_HASH_18500;
                  hashconfig->st_pass        = ST_PASS_HASHCAT_PLAIN;
                  break;
 

tools/test.pl

@@ -94,7 +94,7 @@ my $MODES =
   13400, 13500, 13600, 13800, 13900, 14000, 14100, 14400, 14700, 14800, 14900,
   15000, 15100, 15200, 15300, 15400, 15500, 15600, 15700, 15900, 16000, 16100,
   16200, 16300, 16400, 16500, 16600, 16700, 16800, 16900, 17300, 17400, 17500,
-  17600, 17700, 17800, 17900, 18000, 18100, 18200, 18300, 18400, 99999
+  17600, 17700, 17800, 17900, 18000, 18100, 18200, 18300, 18400, 18500, 99999
 ];
 
 ## STEP 2a: If your hash mode does not need a salt, add it to this array.
@@ -111,7 +111,7 @@ my $COMMON_UNSALTED_MODES =
       0,   100,   101,   133,   200,   300,   600,   900,  1000,  1300,  1400,
    1700,  2600,  3500,  4300,  4400,  4500,  4600,  4700,  5100,  5700,  6000,
    6100,  6900,  9900, 10800, 11500, 11700, 11800, 16400, 17300, 17400, 17500,
-  17600, 17700, 17800, 17900, 18000, 99999
+  17600, 17700, 17800, 17900, 18000, 18500, 99999
 ];
 
 ## STEP 2b: If your hash-mode has a salt without any specific syntax,
@@ -10730,6 +10730,12 @@ END_CODE
 
     $tmp_hash = '$odf$'."*1*1*$iterations*32*$checksum*16*$iv*16*$salt_buf*0*$ciphertext";
   }
+  elsif ($mode == 18500)
+  {
+    $hash_buf = sha1_hex (md5_hex (md5_hex ($word_buf)));
+
+    $tmp_hash = sprintf ("%s", $hash_buf);
+  }
   elsif ($mode == 99999)
   {
     $tmp_hash = sprintf ("%s", $word_buf);

tools/test.sh

@@ -30,7 +30,7 @@ HASH_TYPES="0    10    11    12    20    21    22    23    30    40    50    60\
   13751 13752 13753 13771 13772 13773 13800 13900 14000 14100 14400 14600 14700\
   14800 14900 15000 15100 15200 15300 15400 15500 15600 15700 15900 16000 16100\
   16200 16300 16400 16500 16600 16700 16800 16900 17300 17400 17500 17600 17700\
-  17800 17900 18000 18100 18200 18300 18400 99999"
+  17800 17900 18000 18100 18200 18300 18400 18500 99999"
 
 VECTOR_WIDTHS="1 2 4 8 16"