support for recovering RAR (archive) passwords about hashcat

[jsteube]

Update: Support for RAR3 (with header encryption) was added. RAR3 (without header encryption) and RAR5 is still missing

[magnumripper]

RAR5 is simpler than RAR3, it's standard PBKDF2-SHA256 and no UTF-16.

[jsteube]

Cool, it was indeed easy to add. Pushed with f0a84a2

(Also a good example of how to add new hashes, should do a writeup on it)

Now it's just RAR3 without header encryption missing.

[Fist0urs]

@jsteube this issue can be closed then?

[jsteube]

Almost, there's still a variant which is not supported: RAR3 + not-encrypted headers.

[japhar81]

I'd like to take a stab at the RAR3 + unencrypted headers, but I can not for the life of me find any info on what the algorithm is.. has anyone gotten anywhere in figuring out what actually needs to be done?

[magnumripper]

Have a look at JtR for complete code, including early-rejection code that is required for speed. You also need a lot of unrar-code, we nicked it from clamAV. You probably need to do all but the 256K SHA-1 on CPU side.

[jsteube]

Since rar3-hp and rar5 was added, there's only rar3-p missing. Therefore this issue is continue on a dedicated issue for this mode: #1334