CARVIEW |
|
Software you can find here (what's new?):
|
October 23, 2024
LKRG 0.9.9 is out, adding support for new Linux kernels 6.11+, 6.10.10+, 5.10.220+, as well as new CentOS Stream 9 (upcoming RHEL 9.5).
August 21, 2024
Announcing yescrypt-go, our pure Go reimplementation of yescrypt key derivation function (KDF) and password hashing scheme.
May 14, 2024
We've just published the slides of Solar Designer's OffensiveCon 2024 keynote talk "Password cracking: past, present, future".
March 4, 2024
We've just published the slides of Solar Designer's talk "Linux kernel remote logging: approaches, challenges, implementation" from BSidesZagreb 2024.
September 14, 2023
LKRG 0.9.7 is out, adding support for Linux 6.4 to 6.5.x and hopefully beyond, as well as for new RHEL 9.1 and 9.2 kernels.
June 25, 2023
passwdqc 2.0.3 is out, adding Cygwin support, pkg-config file, and assorted minor changes. Also available is a corresponding update of passwdqc for Windows, adding password policy bypass for system-generated passwords for KRBTGT accounts. Finally, the pre-generated leaked password filter files have been updated (quite a while ago) to include HIBP v8, encoding the 847+ million unique passwords (from billions of accounts) in a 3.3 GiB (3.5 GB) file. |
Openwall software releases and other related files are also available from the Openwall file archive and its mirrors. You are encouraged to use the mirrors, but be sure to verify the signatures on software you download.
The more experienced users and software developers can browse through the source code for most pieces of Openwall software along with revision history information for each source file in our GitHub organization.
We publish articles, make presentations, and offer professional services.
We also maintain a wordlists collection for use with password crackers such as John the Ripper and with password recovery utilities.
Finally, we host community resources such as mailing lists and wiki for users of Openwall software and for other Open Source and computer security folks.
If you would like to be notified of updates to this website and the packages hosted here, please subscribe to the announcement mailing list by entering your e-mail address below or by sending an empty message to <announce-subscribe at lists.openwall.com>. You will be required to confirm your subscription by "replying" to the automated confirmation request that will be sent to you. You will be able to unsubscribe at any time and we will not use your e-mail address for any other purpose or share it with a third party. The list traffic is very low (typically 1 to 5 messages a month). You can review past announcements here.
You can also follow us on Twitter.
LKRG 0.9.9 is out, adding support for new Linux kernels 6.11+, 6.10.10+, 5.10.220+, as well as new CentOS Stream 9 (upcoming RHEL 9.5).
Announcing yescrypt-go, our pure Go reimplementation of yescrypt key derivation function (KDF) and password hashing scheme.
We've just published the slides of Solar Designer's OffensiveCon 2024 keynote talk "Password cracking: past, present, future".
We've just published the slides of Solar Designer's talk "Linux kernel remote logging: approaches, challenges, implementation" from BSidesZagreb 2024.
LKRG 0.9.7 is out, adding support for Linux 6.4 to 6.5.x and hopefully beyond, as well as for new RHEL 9.1 and 9.2 kernels.
passwdqc 2.0.3 is out, adding Cygwin support, pkg-config file, and assorted minor changes.
Also available is a corresponding update of passwdqc for Windows, adding password policy bypass for system-generated passwords for KRBTGT accounts.
Finally, the pre-generated leaked password filter files have been updated (quite a while ago) to include HIBP v8, encoding the 847+ million unique passwords (from billions of accounts) in a 3.3 GiB (3.5 GB) file.
We've just published the slides of Solar Designer's opening keynote talk at SSTIC and its revision at BSidesLjubljana, entitled "15+ years of oss-security".
John the Ripper in the cloud has been updated to use the latest JtR jumbo on freshly updated Amazon Linux 2 with a newer NVIDIA GPU driver. Many new AWS instance types are now supported.
LKRG 0.9.6 is out, adding support for Linux 6.1, RHEL 8.7, current CentOS Stream 9 (upcoming RHEL 9.2), along with a variety of other changes for portability, robustness, and extra security checks.
LKRG 0.9.5 is out, adding support for new longterm kernels 5.10.133+ and reworked support for OverlayFS (Docker).
LKRG 0.9.4 is out, featuring more consistent log messages suitable for both automated analysis and human consumption, as well as adding support for more longterm Linux kernels and for the OpenRC init system.
LKRG 0.9.3 is out, adding support for latest Linux kernels, latest CentOS Stream 8/9 and upcoming RHEL 8.6+, openSUSE Leap, and loading into older Xen PV guests.
LKRG 0.9.2 is out, adding support for new Linux kernels, and assorted bug fixes and enhancements.
LKRG 0.9.0 is out, with support for new Linux kernels, optionally building LKRG in kernel tree, Continuous Integration (boot tests in VMs, including with Ubuntu's daily updated mainline kernels), and much more.
passwdqc 2.0.2 is out, improving the formatting of auto-generated policy descriptions and adding the libpasswdqc(3) manual page.
Two minor updates:
passwdqc 2.0.1 offers improved auto-generated password/passphrase policy descriptions.
scanlogd 2.2.8 builds cleanly with recent glibc.
passwdqc 2.0.0 is out, adding support for external wordlist, denylist, and binary filter files (improved cuckoo filters).
After 10 years since the previous release, we've just released version 1.2 of tcb, implementation of our alternative password shadowing scheme. Changes include libxcrypt and recent glibc support, translated (non-English) messages support, and dropping of NIS/NIS+ support.
We've just republished the slides of LKRG in a nutshell, which we presented a few days ago at OSTconf.
We've started consolidating our Git repositories under the newly setup Openwall organization on GitHub.
We've just launched Openwall Password Recovery and Password Security Auditing Bundle in AWS Marketplace. Start your password recovery or audit in AWS cloud in minutes, complete it within our 5-day free trial or support our Open Source project afterwards.
LKRG 0.8 is out, adding support for latest Linux kernels, 32-bit ARM (LKRG 0.7 already had 64-bit), Raspberry Pi 3 & 4, improving scalability, performance, and tradeoffs, adding the notion of profiles, new documentation, Phoronix Test Suite benchmarks, and much more.
passwdqc 1.4.0 is out, adding optional non-English messages and Linux-PAM audit support.
LKRG 0.7 is out, adding experimental support for ARM64 (AArch64) and grsecurity, support for Linux kernels 5.1 and 5.2 (and hopefully beyond), greater SMEP enforcement, and much more.
yescrypt KDF and password hashing scheme updated to 1.1.0 and included in Fedora and ALT Linux via libxcrypt.
yespower PoW scheme updated to 1.0.1.
John the Ripper 1.9.0 core is out. Stay tuned for the 1.9.0-jumbo-1 release and announcement, which will be "the real one".
LKRG 0.6 is out, adding experimental poor man's Control Flow Integrity support and much more.
11738001