1
0
mirror of https://github.com/hashcat/hashcat.git synced 2024-12-23 15:18:16 +00:00
hashcat/OpenCL/m17500_a1-optimized.cl
Jens Steube 04d5e5a119 New Attack-Mode: Association Attack. Like JtR's single mode. Very early
stage. See hashcat Forum for detailed writeup.
2020-09-29 15:56:32 +02:00

594 lines
15 KiB
Common Lisp

/**
* Author......: See docs/credits.txt
* License.....: MIT
*/
#define NEW_SIMD_CODE
#ifdef KERNEL_STATIC
#include "inc_vendor.h"
#include "inc_types.h"
#include "inc_platform.cl"
#include "inc_common.cl"
#include "inc_simd.cl"
#endif
CONSTANT_VK u64a keccakf_rndc[24] =
{
KECCAK_RNDC_00, KECCAK_RNDC_01, KECCAK_RNDC_02, KECCAK_RNDC_03,
KECCAK_RNDC_04, KECCAK_RNDC_05, KECCAK_RNDC_06, KECCAK_RNDC_07,
KECCAK_RNDC_08, KECCAK_RNDC_09, KECCAK_RNDC_10, KECCAK_RNDC_11,
KECCAK_RNDC_12, KECCAK_RNDC_13, KECCAK_RNDC_14, KECCAK_RNDC_15,
KECCAK_RNDC_16, KECCAK_RNDC_17, KECCAK_RNDC_18, KECCAK_RNDC_19,
KECCAK_RNDC_20, KECCAK_RNDC_21, KECCAK_RNDC_22, KECCAK_RNDC_23
};
#ifndef KECCAK_ROUNDS
#define KECCAK_ROUNDS 24
#endif
KERNEL_FQ void m17500_m04 (KERN_ATTR_BASIC ())
{
/**
* modifier
*/
const u64 lid = get_local_id (0);
/**
* base
*/
const u64 gid = get_global_id (0);
if (gid >= gid_max) return;
u32 pw_buf0[4];
u32 pw_buf1[4];
pw_buf0[0] = pws[gid].i[0];
pw_buf0[1] = pws[gid].i[1];
pw_buf0[2] = pws[gid].i[2];
pw_buf0[3] = pws[gid].i[3];
pw_buf1[0] = pws[gid].i[4];
pw_buf1[1] = pws[gid].i[5];
pw_buf1[2] = pws[gid].i[6];
pw_buf1[3] = pws[gid].i[7];
const u32 pw_l_len = pws[gid].pw_len & 63;
/**
* loop
*/
for (u32 il_pos = 0; il_pos < il_cnt; il_pos += VECT_SIZE)
{
const u32x pw_r_len = pwlenx_create_combt (combs_buf, il_pos) & 63;
const u32x pw_len = (pw_l_len + pw_r_len) & 63;
/**
* concat password candidate
*/
u32x wordl0[4] = { 0 };
u32x wordl1[4] = { 0 };
u32x wordl2[4] = { 0 };
u32x wordl3[4] = { 0 };
wordl0[0] = pw_buf0[0];
wordl0[1] = pw_buf0[1];
wordl0[2] = pw_buf0[2];
wordl0[3] = pw_buf0[3];
wordl1[0] = pw_buf1[0];
wordl1[1] = pw_buf1[1];
wordl1[2] = pw_buf1[2];
wordl1[3] = pw_buf1[3];
u32x wordr0[4] = { 0 };
u32x wordr1[4] = { 0 };
u32x wordr2[4] = { 0 };
u32x wordr3[4] = { 0 };
wordr0[0] = ix_create_combt (combs_buf, il_pos, 0);
wordr0[1] = ix_create_combt (combs_buf, il_pos, 1);
wordr0[2] = ix_create_combt (combs_buf, il_pos, 2);
wordr0[3] = ix_create_combt (combs_buf, il_pos, 3);
wordr1[0] = ix_create_combt (combs_buf, il_pos, 4);
wordr1[1] = ix_create_combt (combs_buf, il_pos, 5);
wordr1[2] = ix_create_combt (combs_buf, il_pos, 6);
wordr1[3] = ix_create_combt (combs_buf, il_pos, 7);
if (combs_mode == COMBINATOR_MODE_BASE_LEFT)
{
switch_buffer_by_offset_le_VV (wordr0, wordr1, wordr2, wordr3, pw_l_len);
}
else
{
switch_buffer_by_offset_le_VV (wordl0, wordl1, wordl2, wordl3, pw_r_len);
}
u32x w0[4];
u32x w1[4];
u32x w2[4];
u32x w3[4];
w0[0] = wordl0[0] | wordr0[0];
w0[1] = wordl0[1] | wordr0[1];
w0[2] = wordl0[2] | wordr0[2];
w0[3] = wordl0[3] | wordr0[3];
w1[0] = wordl1[0] | wordr1[0];
w1[1] = wordl1[1] | wordr1[1];
w1[2] = wordl1[2] | wordr1[2];
w1[3] = wordl1[3] | wordr1[3];
w2[0] = wordl2[0] | wordr2[0];
w2[1] = wordl2[1] | wordr2[1];
w2[2] = wordl2[2] | wordr2[2];
w2[3] = wordl2[3] | wordr2[3];
w3[0] = wordl3[0] | wordr3[0];
w3[1] = wordl3[1] | wordr3[1];
w3[2] = wordl3[2] | wordr3[2];
w3[3] = wordl3[3] | wordr3[3];
/**
* Keccak
*/
u64x a00 = hl32_to_64 (w0[1], w0[0]);
u64x a01 = hl32_to_64 (w0[3], w0[2]);
u64x a02 = hl32_to_64 (w1[1], w1[0]);
u64x a03 = hl32_to_64 (w1[3], w1[2]);
u64x a04 = hl32_to_64 (w2[1], w2[0]);
u64x a10 = hl32_to_64 (w2[3], w2[2]);
u64x a11 = hl32_to_64 (w3[1], w3[0]);
u64x a12 = hl32_to_64 (w3[3], w3[2]);
u64x a13 = 0;
u64x a14 = 0;
u64x a20 = 0;
u64x a21 = 0;
u64x a22 = 0x8000000000000000UL;
u64x a23 = 0;
u64x a24 = 0;
u64x a30 = 0;
u64x a31 = 0;
u64x a32 = 0;
u64x a33 = 0;
u64x a34 = 0;
u64x a40 = 0;
u64x a41 = 0;
u64x a42 = 0;
u64x a43 = 0;
u64x a44 = 0;
#define Rho_Pi(ad,r) \
bc0 = ad; \
ad = hc_rotl64 (t, r); \
t = bc0; \
#ifdef _unroll
#pragma unroll
#endif
for (int round = 0; round < KECCAK_ROUNDS - 1; round++)
{
// Theta
u64x bc0 = a00 ^ a10 ^ a20 ^ a30 ^ a40;
u64x bc1 = a01 ^ a11 ^ a21 ^ a31 ^ a41;
u64x bc2 = a02 ^ a12 ^ a22 ^ a32 ^ a42;
u64x bc3 = a03 ^ a13 ^ a23 ^ a33 ^ a43;
u64x bc4 = a04 ^ a14 ^ a24 ^ a34 ^ a44;
u64x t;
t = bc4 ^ hc_rotl64 (bc1, 1); a00 ^= t; a10 ^= t; a20 ^= t; a30 ^= t; a40 ^= t;
t = bc0 ^ hc_rotl64 (bc2, 1); a01 ^= t; a11 ^= t; a21 ^= t; a31 ^= t; a41 ^= t;
t = bc1 ^ hc_rotl64 (bc3, 1); a02 ^= t; a12 ^= t; a22 ^= t; a32 ^= t; a42 ^= t;
t = bc2 ^ hc_rotl64 (bc4, 1); a03 ^= t; a13 ^= t; a23 ^= t; a33 ^= t; a43 ^= t;
t = bc3 ^ hc_rotl64 (bc0, 1); a04 ^= t; a14 ^= t; a24 ^= t; a34 ^= t; a44 ^= t;
// Rho Pi
t = a01;
Rho_Pi (a20, 1);
Rho_Pi (a12, 3);
Rho_Pi (a21, 6);
Rho_Pi (a32, 10);
Rho_Pi (a33, 15);
Rho_Pi (a03, 21);
Rho_Pi (a10, 28);
Rho_Pi (a31, 36);
Rho_Pi (a13, 45);
Rho_Pi (a41, 55);
Rho_Pi (a44, 2);
Rho_Pi (a04, 14);
Rho_Pi (a30, 27);
Rho_Pi (a43, 41);
Rho_Pi (a34, 56);
Rho_Pi (a23, 8);
Rho_Pi (a22, 25);
Rho_Pi (a02, 43);
Rho_Pi (a40, 62);
Rho_Pi (a24, 18);
Rho_Pi (a42, 39);
Rho_Pi (a14, 61);
Rho_Pi (a11, 20);
Rho_Pi (a01, 44);
// Chi
bc0 = a00; bc1 = a01; bc2 = a02; bc3 = a03; bc4 = a04;
a00 ^= ~bc1 & bc2; a01 ^= ~bc2 & bc3; a02 ^= ~bc3 & bc4; a03 ^= ~bc4 & bc0; a04 ^= ~bc0 & bc1;
bc0 = a10; bc1 = a11; bc2 = a12; bc3 = a13; bc4 = a14;
a10 ^= ~bc1 & bc2; a11 ^= ~bc2 & bc3; a12 ^= ~bc3 & bc4; a13 ^= ~bc4 & bc0; a14 ^= ~bc0 & bc1;
bc0 = a20; bc1 = a21; bc2 = a22; bc3 = a23; bc4 = a24;
a20 ^= ~bc1 & bc2; a21 ^= ~bc2 & bc3; a22 ^= ~bc3 & bc4; a23 ^= ~bc4 & bc0; a24 ^= ~bc0 & bc1;
bc0 = a30; bc1 = a31; bc2 = a32; bc3 = a33; bc4 = a34;
a30 ^= ~bc1 & bc2; a31 ^= ~bc2 & bc3; a32 ^= ~bc3 & bc4; a33 ^= ~bc4 & bc0; a34 ^= ~bc0 & bc1;
bc0 = a40; bc1 = a41; bc2 = a42; bc3 = a43; bc4 = a44;
a40 ^= ~bc1 & bc2; a41 ^= ~bc2 & bc3; a42 ^= ~bc3 & bc4; a43 ^= ~bc4 & bc0; a44 ^= ~bc0 & bc1;
// Iota
a00 ^= keccakf_rndc[round];
}
// Theta
u64x bc0 = a00 ^ a10 ^ a20 ^ a30 ^ a40;
u64x bc1 = a01 ^ a11 ^ a21 ^ a31 ^ a41;
u64x bc2 = a02 ^ a12 ^ a22 ^ a32 ^ a42;
u64x bc3 = a03 ^ a13 ^ a23 ^ a33 ^ a43;
u64x bc4 = a04 ^ a14 ^ a24 ^ a34 ^ a44;
u64x t;
t = bc4 ^ hc_rotl64 (bc1, 1); a00 ^= t; a10 ^= t; a20 ^= t; a30 ^= t;
t = bc0 ^ hc_rotl64 (bc2, 1); a21 ^= t; a31 ^= t; a41 ^= t;
t = bc1 ^ hc_rotl64 (bc3, 1); a02 ^= t; a12 ^= t; a22 ^= t; a32 ^= t;
t = bc2 ^ hc_rotl64 (bc4, 1); a03 ^= t; a13 ^= t; a23 ^= t; a33 ^= t; a43 ^= t;
t = bc3 ^ hc_rotl64 (bc0, 1); a04 ^= t; a34 ^= t; a44 ^= t;
// Rho Pi
t = a01;
Rho_Pi (a20, 1);
Rho_Pi (a12, 3);
Rho_Pi (a21, 6);
Rho_Pi (a32, 10);
Rho_Pi (a33, 15);
Rho_Pi (a03, 21);
Rho_Pi (a10, 28);
Rho_Pi (a31, 36);
Rho_Pi (a13, 45);
Rho_Pi (a41, 55);
Rho_Pi (a44, 2);
Rho_Pi (a04, 14);
Rho_Pi (a30, 27);
Rho_Pi (a43, 41);
Rho_Pi (a34, 56);
Rho_Pi (a23, 8);
Rho_Pi (a22, 25);
Rho_Pi (a02, 43);
#undef Rho_Pi
bc0 = a00;
bc2 = a02;
bc3 = a03;
bc4 = a04;
a02 ^= ~bc3 & bc4;
a03 ^= ~bc4 & bc0;
const u32x r0 = l32_from_64 (a03);
const u32x r1 = h32_from_64 (a03);
const u32x r2 = l32_from_64 (a02);
const u32x r3 = h32_from_64 (a02);
COMPARE_M_SIMD (r0, r1, r2, r3);
}
}
KERNEL_FQ void m17500_m08 (KERN_ATTR_BASIC ())
{
}
KERNEL_FQ void m17500_m16 (KERN_ATTR_BASIC ())
{
}
KERNEL_FQ void m17500_s04 (KERN_ATTR_BASIC ())
{
/**
* modifier
*/
const u64 lid = get_local_id (0);
/**
* base
*/
const u64 gid = get_global_id (0);
if (gid >= gid_max) return;
u32 pw_buf0[4];
u32 pw_buf1[4];
pw_buf0[0] = pws[gid].i[0];
pw_buf0[1] = pws[gid].i[1];
pw_buf0[2] = pws[gid].i[2];
pw_buf0[3] = pws[gid].i[3];
pw_buf1[0] = pws[gid].i[4];
pw_buf1[1] = pws[gid].i[5];
pw_buf1[2] = pws[gid].i[6];
pw_buf1[3] = pws[gid].i[7];
const u32 pw_l_len = pws[gid].pw_len & 63;
/**
* digest
*/
const u32 search[4] =
{
digests_buf[DIGESTS_OFFSET].digest_buf[DGST_R0],
digests_buf[DIGESTS_OFFSET].digest_buf[DGST_R1],
digests_buf[DIGESTS_OFFSET].digest_buf[DGST_R2],
digests_buf[DIGESTS_OFFSET].digest_buf[DGST_R3]
};
/**
* loop
*/
for (u32 il_pos = 0; il_pos < il_cnt; il_pos += VECT_SIZE)
{
const u32x pw_r_len = pwlenx_create_combt (combs_buf, il_pos) & 63;
const u32x pw_len = (pw_l_len + pw_r_len) & 63;
/**
* concat password candidate
*/
u32x wordl0[4] = { 0 };
u32x wordl1[4] = { 0 };
u32x wordl2[4] = { 0 };
u32x wordl3[4] = { 0 };
wordl0[0] = pw_buf0[0];
wordl0[1] = pw_buf0[1];
wordl0[2] = pw_buf0[2];
wordl0[3] = pw_buf0[3];
wordl1[0] = pw_buf1[0];
wordl1[1] = pw_buf1[1];
wordl1[2] = pw_buf1[2];
wordl1[3] = pw_buf1[3];
u32x wordr0[4] = { 0 };
u32x wordr1[4] = { 0 };
u32x wordr2[4] = { 0 };
u32x wordr3[4] = { 0 };
wordr0[0] = ix_create_combt (combs_buf, il_pos, 0);
wordr0[1] = ix_create_combt (combs_buf, il_pos, 1);
wordr0[2] = ix_create_combt (combs_buf, il_pos, 2);
wordr0[3] = ix_create_combt (combs_buf, il_pos, 3);
wordr1[0] = ix_create_combt (combs_buf, il_pos, 4);
wordr1[1] = ix_create_combt (combs_buf, il_pos, 5);
wordr1[2] = ix_create_combt (combs_buf, il_pos, 6);
wordr1[3] = ix_create_combt (combs_buf, il_pos, 7);
if (combs_mode == COMBINATOR_MODE_BASE_LEFT)
{
switch_buffer_by_offset_le_VV (wordr0, wordr1, wordr2, wordr3, pw_l_len);
}
else
{
switch_buffer_by_offset_le_VV (wordl0, wordl1, wordl2, wordl3, pw_r_len);
}
u32x w0[4];
u32x w1[4];
u32x w2[4];
u32x w3[4];
w0[0] = wordl0[0] | wordr0[0];
w0[1] = wordl0[1] | wordr0[1];
w0[2] = wordl0[2] | wordr0[2];
w0[3] = wordl0[3] | wordr0[3];
w1[0] = wordl1[0] | wordr1[0];
w1[1] = wordl1[1] | wordr1[1];
w1[2] = wordl1[2] | wordr1[2];
w1[3] = wordl1[3] | wordr1[3];
w2[0] = wordl2[0] | wordr2[0];
w2[1] = wordl2[1] | wordr2[1];
w2[2] = wordl2[2] | wordr2[2];
w2[3] = wordl2[3] | wordr2[3];
w3[0] = wordl3[0] | wordr3[0];
w3[1] = wordl3[1] | wordr3[1];
w3[2] = wordl3[2] | wordr3[2];
w3[3] = wordl3[3] | wordr3[3];
/**
* Keccak
*/
u64x a00 = hl32_to_64 (w0[1], w0[0]);
u64x a01 = hl32_to_64 (w0[3], w0[2]);
u64x a02 = hl32_to_64 (w1[1], w1[0]);
u64x a03 = hl32_to_64 (w1[3], w1[2]);
u64x a04 = hl32_to_64 (w2[1], w2[0]);
u64x a10 = hl32_to_64 (w2[3], w2[2]);
u64x a11 = hl32_to_64 (w3[1], w3[0]);
u64x a12 = hl32_to_64 (w3[3], w3[2]);
u64x a13 = 0;
u64x a14 = 0;
u64x a20 = 0;
u64x a21 = 0;
u64x a22 = 0x8000000000000000UL;
u64x a23 = 0;
u64x a24 = 0;
u64x a30 = 0;
u64x a31 = 0;
u64x a32 = 0;
u64x a33 = 0;
u64x a34 = 0;
u64x a40 = 0;
u64x a41 = 0;
u64x a42 = 0;
u64x a43 = 0;
u64x a44 = 0;
#define Rho_Pi(ad,r) \
bc0 = ad; \
ad = hc_rotl64 (t, r); \
t = bc0; \
#ifdef _unroll
#pragma unroll
#endif
for (int round = 0; round < KECCAK_ROUNDS - 1; round++)
{
// Theta
u64x bc0 = a00 ^ a10 ^ a20 ^ a30 ^ a40;
u64x bc1 = a01 ^ a11 ^ a21 ^ a31 ^ a41;
u64x bc2 = a02 ^ a12 ^ a22 ^ a32 ^ a42;
u64x bc3 = a03 ^ a13 ^ a23 ^ a33 ^ a43;
u64x bc4 = a04 ^ a14 ^ a24 ^ a34 ^ a44;
u64x t;
t = bc4 ^ hc_rotl64 (bc1, 1); a00 ^= t; a10 ^= t; a20 ^= t; a30 ^= t; a40 ^= t;
t = bc0 ^ hc_rotl64 (bc2, 1); a01 ^= t; a11 ^= t; a21 ^= t; a31 ^= t; a41 ^= t;
t = bc1 ^ hc_rotl64 (bc3, 1); a02 ^= t; a12 ^= t; a22 ^= t; a32 ^= t; a42 ^= t;
t = bc2 ^ hc_rotl64 (bc4, 1); a03 ^= t; a13 ^= t; a23 ^= t; a33 ^= t; a43 ^= t;
t = bc3 ^ hc_rotl64 (bc0, 1); a04 ^= t; a14 ^= t; a24 ^= t; a34 ^= t; a44 ^= t;
// Rho Pi
t = a01;
Rho_Pi (a20, 1);
Rho_Pi (a12, 3);
Rho_Pi (a21, 6);
Rho_Pi (a32, 10);
Rho_Pi (a33, 15);
Rho_Pi (a03, 21);
Rho_Pi (a10, 28);
Rho_Pi (a31, 36);
Rho_Pi (a13, 45);
Rho_Pi (a41, 55);
Rho_Pi (a44, 2);
Rho_Pi (a04, 14);
Rho_Pi (a30, 27);
Rho_Pi (a43, 41);
Rho_Pi (a34, 56);
Rho_Pi (a23, 8);
Rho_Pi (a22, 25);
Rho_Pi (a02, 43);
Rho_Pi (a40, 62);
Rho_Pi (a24, 18);
Rho_Pi (a42, 39);
Rho_Pi (a14, 61);
Rho_Pi (a11, 20);
Rho_Pi (a01, 44);
// Chi
bc0 = a00; bc1 = a01; bc2 = a02; bc3 = a03; bc4 = a04;
a00 ^= ~bc1 & bc2; a01 ^= ~bc2 & bc3; a02 ^= ~bc3 & bc4; a03 ^= ~bc4 & bc0; a04 ^= ~bc0 & bc1;
bc0 = a10; bc1 = a11; bc2 = a12; bc3 = a13; bc4 = a14;
a10 ^= ~bc1 & bc2; a11 ^= ~bc2 & bc3; a12 ^= ~bc3 & bc4; a13 ^= ~bc4 & bc0; a14 ^= ~bc0 & bc1;
bc0 = a20; bc1 = a21; bc2 = a22; bc3 = a23; bc4 = a24;
a20 ^= ~bc1 & bc2; a21 ^= ~bc2 & bc3; a22 ^= ~bc3 & bc4; a23 ^= ~bc4 & bc0; a24 ^= ~bc0 & bc1;
bc0 = a30; bc1 = a31; bc2 = a32; bc3 = a33; bc4 = a34;
a30 ^= ~bc1 & bc2; a31 ^= ~bc2 & bc3; a32 ^= ~bc3 & bc4; a33 ^= ~bc4 & bc0; a34 ^= ~bc0 & bc1;
bc0 = a40; bc1 = a41; bc2 = a42; bc3 = a43; bc4 = a44;
a40 ^= ~bc1 & bc2; a41 ^= ~bc2 & bc3; a42 ^= ~bc3 & bc4; a43 ^= ~bc4 & bc0; a44 ^= ~bc0 & bc1;
// Iota
a00 ^= keccakf_rndc[round];
}
// Theta
u64x bc0 = a00 ^ a10 ^ a20 ^ a30 ^ a40;
u64x bc1 = a01 ^ a11 ^ a21 ^ a31 ^ a41;
u64x bc2 = a02 ^ a12 ^ a22 ^ a32 ^ a42;
u64x bc3 = a03 ^ a13 ^ a23 ^ a33 ^ a43;
u64x bc4 = a04 ^ a14 ^ a24 ^ a34 ^ a44;
u64x t;
t = bc4 ^ hc_rotl64 (bc1, 1); a00 ^= t; a10 ^= t; a20 ^= t; a30 ^= t;
t = bc0 ^ hc_rotl64 (bc2, 1); a21 ^= t; a31 ^= t; a41 ^= t;
t = bc1 ^ hc_rotl64 (bc3, 1); a02 ^= t; a12 ^= t; a22 ^= t; a32 ^= t;
t = bc2 ^ hc_rotl64 (bc4, 1); a03 ^= t; a13 ^= t; a23 ^= t; a33 ^= t; a43 ^= t;
t = bc3 ^ hc_rotl64 (bc0, 1); a04 ^= t; a34 ^= t; a44 ^= t;
// Rho Pi
t = a01;
Rho_Pi (a20, 1);
Rho_Pi (a12, 3);
Rho_Pi (a21, 6);
Rho_Pi (a32, 10);
Rho_Pi (a33, 15);
Rho_Pi (a03, 21);
Rho_Pi (a10, 28);
Rho_Pi (a31, 36);
Rho_Pi (a13, 45);
Rho_Pi (a41, 55);
Rho_Pi (a44, 2);
Rho_Pi (a04, 14);
Rho_Pi (a30, 27);
Rho_Pi (a43, 41);
Rho_Pi (a34, 56);
Rho_Pi (a23, 8);
Rho_Pi (a22, 25);
Rho_Pi (a02, 43);
#undef Rho_Pi
bc0 = a00;
bc2 = a02;
bc3 = a03;
bc4 = a04;
a02 ^= ~bc3 & bc4;
a03 ^= ~bc4 & bc0;
const u32x r0 = l32_from_64 (a03);
const u32x r1 = h32_from_64 (a03);
const u32x r2 = l32_from_64 (a02);
const u32x r3 = h32_from_64 (a02);
COMPARE_S_SIMD (r0, r1, r2, r3);
}
}
KERNEL_FQ void m17500_s08 (KERN_ATTR_BASIC ())
{
}
KERNEL_FQ void m17500_s16 (KERN_ATTR_BASIC ())
{
}