Andrew Main (Zefram) > Authen-Passphrase > Authen::Passphrase::LANManager

Download:
Authen-Passphrase-0.008.tar.gz

Dependencies

Annotate this POD

CPAN RT

New  1
Open  1
View/Report Bugs
Module Version: 0.008   Source  

NAME ^

Authen::Passphrase::LANManager - passphrases using the LAN Manager hash algorithm

SYNOPSIS ^

        use Authen::Passphrase::LANManager;

        $ppr = Authen::Passphrase::LANManager->new(
                hash_hex => "855c3697d9979e78ac404c4ba2c66533");

        $ppr = Authen::Passphrase::LANManager->new(
                passphrase => "passphrase");

        $ppr = Authen::Passphrase::LANManager->from_rfc2307(
                "{LANMAN}855c3697d9979e78ac404c4ba2c66533");

        $hash = $ppr->hash;
        $hash_hex = $ppr->hash_hex;

        $ppr0 = $ppr->first_half;
        $ppr1 = $ppr->second_half;

        if($ppr->match($passphrase)) { ...

        $userPassword = $ppr->as_rfc2307;

DESCRIPTION ^

An object of this class encapsulates a passphrase hashed using the Microsoft LAN Manager hash function. This is a subclass of Authen::Passphrase, and this document assumes that the reader is familiar with the documentation for that class.

The hash algorithm can be used on up to fourteen Latin-1 characters of passphrase. First the passphrase is folded to uppercase, and zero-padded to fourteen bytes. Then it is split into two halves. Each seven-byte half is used as a 56-bit DES key, to encrypt the fixed plaintext block "KGS!@#$%". The eight-byte ciphertexts are concatenated to form the sixteen-byte hash. There is no salt.

Because the two halves of the passphrase are hashed separately, it is possible to manipulate (e.g., crack) a half hash in isolation. See Authen::Passphrase::LANManagerHalf.

Warning: Don't even think about using this seriously. It's an exceptionally weak design, flawed in pretty much every respect.

CONSTRUCTORS ^

Authen::Passphrase::LANManager->new(ATTR => VALUE, ...)

Generates a new passphrase recogniser object using the LAN Manager hash algorithm. The following attributes may be given:

hash

The hash, as a string of 16 bytes.

hash_hex

The hash, as a string of 32 hexadecimal digits.

passphrase

A passphrase that will be accepted.

Either the hash or the passphrase must be given.

Authen::Passphrase::LANManager->from_rfc2307(USERPASSWORD)

Generates a LAN Manager passphrase recogniser from the supplied RFC2307 encoding. The string must consist of "{LANMAN}" (or its synonym "{LANM}") followed by the hash in hexadecimal; case is ignored.

METHODS ^

$ppr->hash

Returns the hash value, as a string of 16 bytes.

$ppr->hash_hex

Returns the hash value, as a string of 32 hexadecimal digits.

$ppr->first_half

Returns the hash of the first half of the passphrase, as an Authen::Passphrase::LANManagerHalf passphrase recogniser.

$ppr->second_half

Returns the hash of the second half of the passphrase, as an Authen::Passphrase::LANManagerHalf passphrase recogniser.

$ppr->match(PASSPHRASE)
$ppr->as_rfc2307

These methods are part of the standard Authen::Passphrase interface.

SEE ALSO ^

Authen::Passphrase, Authen::Passphrase::LANManagerHalf, Crypt::DES

AUTHOR ^

Andrew Main (Zefram) <zefram@fysh.org>

COPYRIGHT ^

Copyright (C) 2006, 2007, 2009, 2010, 2012 Andrew Main (Zefram) <zefram@fysh.org>

LICENSE ^

This module is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

syntax highlighting: