Given two different known passwords, let's just call them A and B for now, what is the fastest way to compare their strength with John the Ripper?
I know that I could just add two users to my Linux system and run
john on my
/etc/shadow. It will be more efficient to then just extract those two users from
/etc/shadow and run
john on those two only. But that would still use Blowfish or whatever secure algorithm is used, and I do not want to test the algorithm, just the passwords. I could configure my system to a weaker algorithm for that purpose. But I'm looking for an even smarter, faster way. Preferably even adding a custom dictionary for words that might be used in one of the passwords.
The actual use case is to compare the strength between:
- a slightly longer password that contains words from a dictionary but is obfuscated to use characters from four character classes
- a slightly shorter password that uses characters from three character classes but no dictionary entries