The core developer of the Hashcat password tool, Austin, Texas security analyst Sam Croley recently tested his password-cracking benchmark tool to see how the new Nvidia GeForce RTX 4090 GPU can crack passwords. How does it perform, the results show twice the performance of the previous generation RTX 3090 GPU.
Some netizens asked Croley how long it would take to "brute force" an eight-character password, and the results were surprising. For a standard eight-digit password consisting of numbers, uppercase and lowercase letters, and symbols, the cracking time using an Nvidia RTX 4090 GPU is estimated to be 6.1 hours, even in the face of Microsoft's new technology Local Area Network Management (NTLM) authentication protocol and Bcrypt ciphers The same is true when hacking functions. This means that any player with an RTX 4090 can crack a common password in a few days. Of course, it is possible to use multiple graphics cards for faster cracking.
If we do the math for NTLM, 300GH/s is 300 Billion hashes per second, ?a is 95 characters, length 8 makes it a keyspace of 95^8, divide that by the speed and get 22111 seconds. Then convert from seconds and you get 368 minutes or 6.1 hours to complete the keyspace on 1x 4090 GPU.
— Chick3nman 🐔 (@Chick3nman512) October 14, 2022
HashCat V.6.2.6. is a well-known password cracking tool that allows researchers to crack user passwords in a few cases where they may be required. In tests, the RTX 4090 beat the RTX 3090 in almost all algorithms, almost doubling the performance. The RTX 4090 shines in several attack types available in HashCat software: dictionary attack, combiner attack, mask attack, rule-based attack, and brute force attack.
The researchers estimate that a purpose-built password-hashing rig (with eight RTX 4090 GPUs) can crack an eight-digit password in 48 minutes. According to Statista and 2017 data, 8-character passwords are the most common of compromised passwords, accounting for 32% of the total.
Don't worry though, tools like HashCat that are easy to-crack passwords are usually deployed offline, not online, which means there's very little chance that your computer will be randomly cracked by an RTX 4090 player.
0 Comments