From nobody@FreeBSD.org  Fri Jul 11 09:03:29 2008
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 476891065677
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 11 Jul 2008 09:03:29 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 45B4E8FC1C
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 11 Jul 2008 09:03:29 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.2/8.14.2) with ESMTP id m6B93SX7062350
	for <freebsd-gnats-submit@FreeBSD.org>; Fri, 11 Jul 2008 09:03:28 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.2/8.14.1/Submit) id m6B93S8p062349;
	Fri, 11 Jul 2008 09:03:28 GMT
	(envelope-from nobody)
Message-Id: <200807110903.m6B93S8p062349@www.freebsd.org>
Date: Fri, 11 Jul 2008 09:03:28 GMT
From: Dax Labrador <semprix@secureroot.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: [UPDATE] security/rainbowcrack: patch
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         125500
>Category:       ports
>Synopsis:       [UPDATE] security/rainbowcrack: patch
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    wxs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jul 11 09:10:02 UTC 2008
>Closed-Date:    Mon Jul 14 02:24:15 UTC 2008
>Last-Modified:  Mon Jul 14 02:30:03 UTC 2008
>Originator:     Dax Labrador
>Release:        FreeBSD 7.0-RELEASE i386
>Organization:
>Environment:
FreeBSD cerrgglobal.com 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
>Description:
Take maintainership

applied patch to support NTLM, MD2, MD4 and RIPEMD160 algorithms




>How-To-Repeat:

>Fix:


Patch attached with submission follows:

# This is a shell archive.  Save it in a file, remove anything before
# this line, and then unpack it by entering "sh file".  Note, it may
# create directories; files and directories will be owned by you and
# have default permissions.
#
# This archive contains:
#
#	rainbowcrack/
#	rainbowcrack/Makefile
#	rainbowcrack/distinfo
#	rainbowcrack/pkg-descr
#	rainbowcrack/pkg-plist
#	rainbowcrack/files
#	rainbowcrack/files/patch-HashAlgorithm.cpp
#	rainbowcrack/files/patch-HashAlgorithm.h
#	rainbowcrack/files/patch-HashRoutine.cpp
#
echo c - rainbowcrack/
mkdir -p rainbowcrack/ > /dev/null 2>&1
echo x - rainbowcrack/Makefile
sed 's/^X//' >rainbowcrack/Makefile << 'END-of-rainbowcrack/Makefile'
X# New ports collection makefile for:   rainbowcrack
X# Date created:        8 May 2006
X# Whom:                bryan@freshdns.net
X#
X# $FreeBSD: ports/security/rainbowcrack/Makefile,v 1.4 2008/02/28 15:55:05 erwin Exp $
X#
X
XPORTNAME=	rainbowcrack
XPORTVERSION=	1.2
XCATEGORIES=	security
XMASTER_SITES=	http://freshdns.net/rainbowcrack/
X
XMAINTAINER=     semprix@secureroot.com	
XCOMMENT=	Hash cracker that precomputes plaintext - ciphertext pairs in advance
X
X.include <bsd.port.pre.mk>
X
X.if ${ARCH} == "ia64" || ${ARCH} == "sparc64"
XBROKEN=		does not compile on ia64 or sparc64
X.endif
X
Xpost-patch:
X	@${REINPLACE_CMD} -e 's|g++|$$(CXX) $$(CXXFLAGS)|; s|\-O3||' \
X		${WRKSRC}/${MAKEFILE}
X
Xdo-install:
X.for f in rcrack rtgen rtdump rtsort
X	${INSTALL_PROGRAM} ${WRKSRC}/${f} ${PREFIX}/bin
X.endfor
X	${MKDIR} ${EXAMPLESDIR}
X	${INSTALL_DATA} ${WRKSRC}/charset.txt ${EXAMPLESDIR}
X
X.include <bsd.port.post.mk>
END-of-rainbowcrack/Makefile
echo x - rainbowcrack/distinfo
sed 's/^X//' >rainbowcrack/distinfo << 'END-of-rainbowcrack/distinfo'
XMD5 (rainbowcrack-1.2.tar.gz) = bf806a618206147d83d26a7e162acfe1
XSHA256 (rainbowcrack-1.2.tar.gz) = d035cb12c0f762fac78f617dea246c5cf4b7503c3b173c3871663eaa3f02b6b4
XSIZE (rainbowcrack-1.2.tar.gz) = 16215
END-of-rainbowcrack/distinfo
echo x - rainbowcrack/pkg-descr
sed 's/^X//' >rainbowcrack/pkg-descr << 'END-of-rainbowcrack/pkg-descr'
XRainbowCrack is a general propose implementation of Philippe Oechslin's faster
Xtime-memory trade-off technique.
X
XIn short, the RainbowCrack tool is a hash cracker. A traditional brute force
Xcracker tries all possible plaintexts one by one in cracking time. It is time
Xconsuming to break complex passwords this way. The idea of time-memory trade-off
Xis to do all cracking time computation in advance and store the result in files
Xso called "rainbow table". It does take a long time to precompute the tables.
XBut once the one time precomputation is finished, a time-memory trade-off
Xcracker can be hundreds of times faster than a brute force cracker, with the
Xhelp of precomputed tables.
X
XWWW: http://www.antsight.com/zsl/rainbowcrack/
END-of-rainbowcrack/pkg-descr
echo x - rainbowcrack/pkg-plist
sed 's/^X//' >rainbowcrack/pkg-plist << 'END-of-rainbowcrack/pkg-plist'
Xbin/rcrack
Xbin/rtgen
Xbin/rtdump
Xbin/rtsort
X%%EXAMPLESDIR%%/charset.txt
X@dirrm %%EXAMPLESDIR%%
END-of-rainbowcrack/pkg-plist
echo c - rainbowcrack/files
mkdir -p rainbowcrack/files > /dev/null 2>&1
echo x - rainbowcrack/files/patch-HashAlgorithm.cpp
sed 's/^X//' >rainbowcrack/files/patch-HashAlgorithm.cpp << 'END-of-rainbowcrack/files/patch-HashAlgorithm.cpp'
X--- src/HashAlgorithm.cpp.orig	2003-11-23 00:33:22.000000000 -0500
X+++ src/HashAlgorithm.cpp	2008-07-11 07:16:11.000000000 -0400
X@@ -6,9 +6,14 @@
X 
X #include "HashAlgorithm.h"
X 
X+#include "Public.h"
X+
X #include <openssl/des.h>
X+#include <openssl/md2.h>
X+#include <openssl/md4.h>
X #include <openssl/md5.h>
X #include <openssl/sha.h>
X+#include <openssl/ripemd.h>
X #ifdef _WIN32
X 	#pragma comment(lib, "libeay32.lib")
X #endif
X@@ -48,6 +53,29 @@
X 	des_ecb_encrypt((des_cblock*)magic, (des_cblock*)pHash, ks, DES_ENCRYPT);
X }
X 
X+void HashNTLM(unsigned char* pPlain, int nPlainLen, unsigned char* pHash)
X+{
X+	unsigned char UnicodePlain[MAX_PLAIN_LEN * 2];
X+	int i;
X+	for (i = 0; i < nPlainLen; i++)
X+	{
X+		UnicodePlain[i * 2] = pPlain[i];
X+		UnicodePlain[i * 2 + 1] = 0x00;
X+	}
X+
X+	MD4(UnicodePlain, nPlainLen * 2, pHash);
X+}
X+
X+void HashMD2(unsigned char* pPlain, int nPlainLen, unsigned char* pHash)
X+{
X+	MD2(pPlain, nPlainLen, pHash);
X+}
X+
X+void HashMD4(unsigned char* pPlain, int nPlainLen, unsigned char* pHash)
X+{
X+	MD4(pPlain, nPlainLen, pHash);
X+}
X+
X void HashMD5(unsigned char* pPlain, int nPlainLen, unsigned char* pHash)
X {
X 	MD5(pPlain, nPlainLen, pHash);
X@@ -57,3 +85,8 @@
X {
X 	SHA1(pPlain, nPlainLen, pHash);
X }
X+
X+void HashRIPEMD160(unsigned char* pPlain, int nPlainLen, unsigned char* pHash)
X+{
X+	RIPEMD160(pPlain, nPlainLen, pHash);
X+}
END-of-rainbowcrack/files/patch-HashAlgorithm.cpp
echo x - rainbowcrack/files/patch-HashAlgorithm.h
sed 's/^X//' >rainbowcrack/files/patch-HashAlgorithm.h << 'END-of-rainbowcrack/files/patch-HashAlgorithm.h'
X--- src/HashAlgorithm.h.orig	2003-11-23 00:33:18.000000000 -0500
X+++ src/HashAlgorithm.h	2008-07-11 07:16:47.000000000 -0400
X@@ -8,7 +8,13 @@
X #define _HASHALGORITHM_H
X 
X void HashLM(unsigned char* pPlain, int nPlainLen, unsigned char* pHash);
X+void HashNTLM(unsigned char* pPlain, int nPlainLen, unsigned char* pHash);
X+
X+void HashMD2(unsigned char* pPlain, int nPlainLen, unsigned char* pHash);
X+void HashMD4(unsigned char* pPlain, int nPlainLen, unsigned char* pHash);
X void HashMD5(unsigned char* pPlain, int nPlainLen, unsigned char* pHash);
X+
X void HashSHA1(unsigned char* pPlain, int nPlainLen, unsigned char* pHash);
X+void HashRIPEMD160(unsigned char* pPlain, int nPlainLen, unsigned char* pHash);
X 
X #endif
END-of-rainbowcrack/files/patch-HashAlgorithm.h
echo x - rainbowcrack/files/patch-HashRoutine.cpp
sed 's/^X//' >rainbowcrack/files/patch-HashRoutine.cpp << 'END-of-rainbowcrack/files/patch-HashRoutine.cpp'
X--- src/HashRoutine.cpp.orig	2003-11-23 00:33:16.000000000 -0500
X+++ src/HashRoutine.cpp	2008-07-11 07:17:09.000000000 -0400
X@@ -18,8 +18,12 @@
X 	// Notice: MIN_HASH_LEN <= nHashLen <= MAX_HASH_LEN
X 
X 	AddHashRoutine("lm",   HashLM,   8);
X+	AddHashRoutine("ntlm", HashNTLM, 16);
X+	AddHashRoutine("md2",  HashMD2,  16);
X+	AddHashRoutine("md4",  HashMD4,  16);
X 	AddHashRoutine("md5",  HashMD5,  16);
X 	AddHashRoutine("sha1", HashSHA1, 20);
X+	AddHashRoutine("ripemd160", HashRIPEMD160, 20);
X }
X 
X CHashRoutine::~CHashRoutine()
END-of-rainbowcrack/files/patch-HashRoutine.cpp
exit



>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->wxs 
Responsible-Changed-By: wxs 
Responsible-Changed-When: Fri Jul 11 15:06:24 UTC 2008 
Responsible-Changed-Why:  
I'll take it. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=125500 

From: Wesley Shields <wxs@atarininja.org>
To: bug-followup@FreeBSD.org, semprix@secureroot.com
Cc:  
Subject: Re: ports/125500: [UPDATE] security/rainbowcrack: patch
Date: Sun, 13 Jul 2008 22:06:08 -0400

 The master site for this port appears down.  Do you know if this is a
 temporary thing or if it's abandoned by the author?  If the latter do
 you know of a place where development is continuing.  If the software is
 truly abandoned we should mark it as deprecated and remove it from the
 tree eventually.
 
 Please get back to me with this information so we can decide what to do
 with this port.
 
 -- WXS
State-Changed-From-To: open->closed 
State-Changed-By: wxs 
State-Changed-When: Mon Jul 14 02:24:14 UTC 2008 
State-Changed-Why:  
Submitter address bounces.  Further, the port is apparently abandoned as 
the master site has disappeared completely.  Mark this as deprecated 
with a 2 month expiration date. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=125500 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: ports/125500: commit references a PR
Date: Mon, 14 Jul 2008 02:23:29 +0000 (UTC)

 wxs         2008-07-14 02:23:20 UTC
 
   FreeBSD ports repository
 
   Modified files:
     security/rainbowcrack Makefile 
   Log:
   Mark as deprecated and set to expire in 2 months.
   It has apparently been abandoned by the author and the master site
   has disappeared.
   
   PR:             ports/125500
   
   Revision  Changes    Path
   1.5       +3 -0      ports/security/rainbowcrack/Makefile
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 
>Unformatted:
