Password Cracking with Brute Force Algorithm and Dictionary Attack Using Parallel Programming
Source abstract
Abstract
Studying password-cracking techniques is essential in the information security discipline as it highlights the vulnerability of weak passwords and the need for stronger security measures to protect sensitive information. While both methods aim to uncover passwords, both approach the task in different ways. A brute force algorithm generates all possible combinations of characters in a specified range and length, while the dictionary attack checks against a predefined word list. This study compares the efficiency of these methods using parallel versions of Python, C++, and Hashcat. The results show that the NVIDIA GeForce GTX 1050 Ti with CUDA is significantly faster than the Intel(R) HD Graphics 630 GPU for cracking passwords, with a speedup of 11.5× and 10.4× for passwords with and without special characters, respectively. Special characters increase password-cracking time, making the process more challenging. The results of our implementation indicate that parallel processing greatly improves the speed of password-cracking techniques. The brute force algorithm achieved a speedup of 1.9× with six cores, while the dictionary attack showed a speedup of 4.4× with eight-core static scheduling. Studying password-cracking techniques highlights the need for stronger security measures to protect sensitive information and the vulnerability of weak passwords.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Advanced Malware Detection Techniques · User Authentication and Security Systems · Security and Verification in Computing
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Science, College of Computer Science and Information Technology, Imam Abdulrahman Bin Faisal University, P.O. Box 1982, Dammam 31441, Saudi Arabia
Deanship of Admissions and Registration, Imam Abdulrahman Bin Faisal University, P.O. Box 1982, Dammam 31441, Saudi Arabia
References (28)
Show source-provided references
1. Grover, V., and Gagandeep (2020). An Efficient Brute Force Attack Handling Techniques for Server Virtualization. SSRN Electron. J.10.2139/ssrn.3564447 ↗
2. An Energy-Efficient Accelerator Based on Hybrid CPU-FPGA Devices for Password Recovery10.1109/TC.2018.2868191 ↗
3. Tirado, E., Turpin, B., Beltz, C., Roshon, P., Judge, R., and Gagneja, K. (2018, January 9–11). A New Distributed Brute-Force Password Cracking Technique. Proceedings of the Future Network Systems and Security: 4th International Conference, FNSS 2018, Paris, France.10.1007/978-3-319-94421-0_9 ↗
4. Hranický, R. (2022). Digital Forensics: The Acceleration of Password Cracking. [Ph.D. Thesis, Brno University of Technology].
5. Brute Force Attack on Real World Passwords
6. Optimized Password Recovery for SHA-512 on GPUs
7. Saputra, R., and Noranita, B. (2019, January 29–30). Analysis of GPGPU-Based Brute-Force and Dictionary Attack on SHA-1 Password Hash. Proceedings of the 2019 3rd International Conference on Informatics and Computational Sciences (ICICoS), Semarang, Indonesia.10.1109/ICICoS48119.2019.8982390 ↗
8. A Hybrid-CPU-FPGA-Based Solution to the Recovery of Sha256crypt-Hashed Passwords
9. Experimental Evaluation of Password Recovery in Encrypted Documents
10. Parallel Active Dictionary Attack on WPA2-PSK Wi-Fi Networks
11. Hendarto, I.L.S., and Kurniawan, Y. (2017, January 23–26). Performance Factors of a CUDA GPU Parallel Program: A Case Study on a PDF Password Cracking Brute-Force Algorithm. Proceedings of the 2017 International Conference on Computer, Control, Informatics and its Applications (IC3INA), Jakarta, Indonesia.10.1109/IC3INA.2017.8251736 ↗
12. Mount, S., and Newman, R. (2015, January 7–9). Energy-Efficient Brute Force Password Cracking. Proceedings of the 2015 European Intelligence and Security Informatics Conference, Manchester, UK.10.1109/EISIC.2015.50 ↗
13. Wang, F., Yang, C., Wu, Q., and Shi, Z. (2012, January 14–17). Constant Memory Optimizations in MD5 Crypt Cracking Algorithm on GPU-Accelerated Supercomputer Using CUDA. Proceedings of the 2012 7th International Conference on Computer Science & Education (ICCSE), Melbourne, Australia.10.1109/ICCSE.2012.6295156 ↗
14. Abdelrahman, A., Khaled, H., Shaaban, E., and Elkilani, W.S. (2018, January 18–19). WPA-WPA2 Psk Cracking Implementation on Parallel Platforms. Proceedings of the 2018 13th International Conference on Computer Engineering and Systems (ICCES), Cairo, Egypt.10.1109/ICCES.2018.8639328 ↗
15. An Improved Dictionary Cracking Scheme Based on Multiple GPUs for Wi-Fi Network
16. Apostal, D., Foerster, K., Chatterjee, A., and Desell, T. (2012, January 18–21). Password Recovery Using MPI and CUDA. Proceedings of the 2012 19th International Conference on High Performance Computing, Pune, India.10.1109/HiPC.2012.6507505 ↗
17. Vu, A.-D., Han, J.-I., Nguyen, H.-A., Kim, Y.-M., and Im, E.-J. (2011, January 28–30). A Homogeneous Parallel Brute Force Cracking Algorithm on the GPU. Proceedings of the ICTC 2011, Seoul, Republic of Korea.10.1109/ICTC.2011.6082661 ↗
18. Gillela, M., Prenosil, V., and Ginjala, V.R. (2019, January 5–9). Parallelization of Brute-Force Attack on MD5 Hash Algorithm on FPGA. Proceedings of the 2019 32nd International Conference on VLSI Design and 2019 18th International Conference on Embedded Systems (VLSID), Delhi, India.10.1109/VLSID.2019.00034 ↗
19. Speedup and Password Recovery for Encrypted WinRAR3 without Encrypting Filename on GPUs10.1088/1742-6596/1673/1/012047 ↗
20. Ding, Q., Zhang, Z., Li, S., and Liu, P. (2019, January 26–29). Energy-Efficient RAR3 Password Recovery with Dual-Granularity Data Path Strategy. Proceedings of the 2019 IEEE International Symposium on Circuits and Systems (ISCAS), Sapporo, Japan.10.1109/ISCAS.2019.8702713 ↗
21. Hu, G., Ma, J., and Huang, B. (2009, January 12–14). Password Recovery for RAR Files Using CUDA. Proceedings of the 2009 Eighth IEEE International Conference on Dependable, Autonomic and Secure Computing, Chengdu, China.10.1109/DASC.2009.123 ↗
22. Pi, J., De, P., and Mueller, K. (2013, January 15–18). Using Gpus to Crack Android Pattern-Based Passwords. Proceedings of the 2013 International Conference on Parallel and Distributed Systems, Seoul, Republic of Korea.10.1109/ICPADS.2013.80 ↗
23. An, X., Jia, H., and Zhang, Y. (2015, January 24–26). Optimized Password Recovery for Encrypted RAR on GPUs. Proceedings of the 2015 IEEE 17th International Conference on High Performance Computing and Communications, 2015 IEEE 7th International Symposium on Cyberspace Safety and Security, and 2015 IEEE 12th International Conference on Embedded Software and Systems, New York, NY, USA.10.1109/HPCC-CSS-ICESS.2015.270 ↗
24. Research on Steel Barrel Flattened Seam Recognition Based on Machine Vision10.1088/1742-6596/1633/1/012014 ↗
25. Enhancement of Hakak’s Split-Based Searching Algorithm through Multiprocessing
26. Norouzi, M., Wolf, F., and Jannesari, A. (2019, January 26–28). Automatic Construct Selection and Variable Classification in OpenMP. Proceedings of the ACM International Conference on Supercomputing, Phoenix, AZ, USA.10.1145/3330345.3330375 ↗
27. Burns, W.J. (2023, February 15). Common Password List (Rockyou.Txt). Available online: https://www.kaggle.com/datasets/wjburns/common-password-list-rockyoutxt.
28. Alnoon, H., and Al Awadi, S. (2009). Executing Parallelized Dictionary Attacks on Cpus and Gpus. Moais. Imago Fr., Available online: https://moais.imag.fr/membres/jean-louis.roch/perso_html/transfert/2009-06-19-IntensiveProjects-M1-SCCI-Reports/HassanShayma.pdf.