<!DOCTYPE linuxdoc
               PUBLIC "-//LinuxDoc//DTD LinuxDoc 96//EN" >

<article>

<title>Free SoftWare from GroarWare
<author><htmlurl url="mailto:Denis.Ducamp at groar.org" name="Groar">
<date>Last modification: 2003/08/11

<toc>

<sect>What's new (2003/08/11)

<p>

<sect1>(2003/08/11) New test versions

<p><htmlurl url="groar/tests/groar-0.1.18.pre7.tar.gz"
name="groar-0.1.18.pre7"> (see <htmlurl url="groar/tests/NEWS" name="NEWS">
files) and <htmlurl url="titi/tests/titi-0.1.8.pre8.tar.gz"
name="titi-0.1.8.pre8"> (see <htmlurl url="titi/tests/NEWS" name="NEWS">
files)

<p>The most important news are :
<itemize>
<item>groar and titi now do need OpenSSL 0.9.6 or newer.
<item>K&amp;R support has been removed.
</itemize>

<sect1>(2001/08/16) Temporary solution to configure not finding system libssl library

<p>Use "<it>./configure --with-openssl=/usr</it>" to configure groar

<p>This permits to configure groar under <it>FreeBSD 4.4</it>, <it>RedHat
7.1</it>, <it>Mandrake 8.0</it> and certainly others...

<sect1>updates

<p>

<itemize>

<item><it>00/12/06</it> <it>groar 0.1.18.pre2</it> has been reported
compiling et working under <it>AIX 4.2.1.0</it> with <it>cc 3.1.4.0</it>
<bf>:-)</bf>

<item><it>00/11/26</it> <it>groar</it> has been ported to <it>SunOS
4.1.4</it> with <it>OpenSSL 0.9.4</it> and <it>non-ANSI cc</it>:
<bf>groar-0.1.18.pre2</bf> .
<itemize>
<item>changed md4 files from OpenBSD by those from <it>OpenSSL 0.9.6</it>
&nl;<bf>todo</bf>: support using md4 functions from <it>OpenSSL</it> if
available.
</itemize>

<item><it>00/11/20</it> <it>groar 0.1.18.pre1</it> has been reported
compiling et working under <it>Solaris 2.8</it> with <it>WorkShop Compilers
5.0</it> <bf>:-)</bf>

<item><it>00/11/19</it> <it>titi</it> has been partially ported to <it>SunOS
4.1.4</it> with <it>OpenSSL 0.9.4</it> and <it>non-ANSI cc</it>:
<bf>titi-0.1.8.pre3</bf> .
<itemize>
<item><it>crypt</it> and <it>sha1</it> work , <it>lanman</it> doesn't
<item><it>ntlm</it> doesn't compile because this cc doesn't know about long long
&nl;<bf>todo</bf>: change md4 files by those from <it>OpenSSL 0.9.6</it>
<item><it>titi-0.1.7</it> compiles and works fine yet with <it>gcc
2.7.2.1</it>
<item>to port <it>groar-0.1.18.pre1</it> to <it>SunOS 4.1.4</it> with
<it>non-ANSI cc</it> I have to change md4 files by those from <it>OpenSSL
0.9.6</it>
</itemize>

<item><it>00/11/19</it> <it>titi</it> has been ported to <it>HP-UX B.11.00 U
9000/800</it> with <it>OpenSSL 0.9.6</it> and <it>non-ANSI cc</it>:
<bf>titi-0.1.8.pre2</bf>

<item><it>00/11/18</it> <it>groar</it> has been ported to <it>HP-UX B.11.00
U 9000/800</it> with <it>OpenSSL 0.9.6</it> and <it>non-ANSI cc</it>:
<bf>groar-0.1.18.pre1</bf>

<item><it>00/11/17</it> <it>titi</it> has been ported to <it>HP-UX B.11.00 U
9000/800</it> with <it>OpenSSL 0.9.6</it> and <it>gcc 2.95.2</it>:
<bf>titi-0.1.8.pre1</bf> .
<itemize>
<item><it>groar-0.1.17</it> compiles and works fine yet.
</itemize>

<item><it>00/11/06</it> The pre versions of <it>groar</it> and <it>titi</it>
have been upgraded to stable versions: <bf>groar-0.1.17</bf> and
<bf>titi-0.1.7</bf>
<itemize>
<item>updates of files from OpenBSD and OpenLDAP.
<item>groar and titi compile with <it>OpenSSL 0.9.6</it> .
</itemize>

</itemize>

<sect1>grunt !

<p>Pages and archives have been deleted from <htmlurl
url="http://groar.sourceforge.net/" name="http://groar.sourceforge.net/">
and <htmlurl url="http://sourceforge.net/projects/groar/"
name="http://sourceforge.net/projects/groar/">

<sect1>Please help...

<p>Please, send <htmlurl url="mailto:ducamp at groar.org"
name="me"> an e-mail to say on <em>which platform</em> you tried to compile
groar and/or titi and what are <em>the results</em> of the following
commands:

<itemize>
<item><em>uname -a</em>
<item><em>ldd groar</em>
<item><em>groar -t</em>
<item><em>groar -b</em>
</itemize>

<p>If <em>./configure</em> or <em>make</em> fail then send me the
<bf>trace</bf> of faulty command.

<sect1>What I'm working on...

<p>I'm working on several authentication protocols
so it could help me a lot if you could send me:
<itemize>
<item>tcpdump of failed and successfull authentification
<item>the passwords used to authenticate
</itemize>

The protocols are:
<itemize>
<item><bf>ntlmv2</bf>: my priority
<item><bf>ntlm</bf> in imap, http, ldap, nntp and pop3
</itemize>

<p>Yes, I want to show to everybody that Microsoft's obfuscation isn't
security and that poor passwords are <bf>always a security risk</bf>.

<p>I do need to receive a lot of networks dumps (preferably in tcpdump
format). Thanks to everyone who is going to spend just five little minutes
to help me.

<sect1>What's going on...

<p><em>The real news</em>: I'm always working on the heart of groar to
support, in a nice way, salted passwords (I hate pointers... which proves
that I'm a bad programmer; well it's not very new...).

<sect>Home Pages

<p>Hello, welcome at <htmlurl url="http://www.groar.org/"
name="http://www.groar.org/">

<p>I'm just moving in... so the look of that page.

<p>A mailing-list is available:

<itemize>

<item>visit <htmlurl
url="http://lists.sourceforge.net/mailman/listinfo/groar-dru"
name="lists.sourceforge.net/mailman/listinfo/groar-dru"> to subscribe

<item>visit <htmlurl
url="http://www.geocrawler.com/lists/3/SourceForge/1058/0/"
name="www.geocrawler.com/lists/3/SourceForge/1058/0/"> to browse the
archive.

</itemize>

<sect>Project's goals

<p>That project began with an administrator that told me that his passwords
from his web server were safe because they were hashed with sha1: a few
hours latter, I wrote my first password cracker in a quater of hour and
cracked more than 50% .

<p>Another lesson here is that a network application isn't secure just
because every session are crypted...&lt;/personnal message&gt;

<p>Because <it>passwords are often</it> <bf>the first and the last</bf>
<it>security in a lot of systems and applications</it>, the goal of the
groar project is to strengthen security by educating people.

<p>Because an image can be better than an hundred words, the first step is
to implement a password cracker <it>to show people how</it> <bf>easy</bf>
<it>it can be to crack passwords and to</it> <bf>write</bf>
<it>crackers</it>. That password cracker will never be as fast as John the
Ripper and you will need the latter to really use the former. It will be
designed to easily add algorithmes.

<p>The second step will be to document as much pasword crypting algorithms
as possible and to denounce thoses that are undocumented and/or weak.

<sect>Packages

<p>Two packages are available for download:

<itemize>

<item><bf><htmlurl url="http://www.groar.org/" name="groar"></bf> is a
<it>password cracker</it>

<p>Actually <bf>groar</bf> supports:
<itemize>
<item><it>SHA1</it> (Netscape LDAP databases and some apache servers),
<item><it>LM</it> & <it>NTLM</it> (without challenge/response),
<item><it>CLEARtext</it> passwords.
</itemize>

<p>Available files <htmlurl url="groar/" name="here"> are:
<itemize>

<item><htmlurl url="groar/groar.1" name="groar.1">: a text version of the
manual page,

<item><htmlurl url="groar/tests/ChangeLog" name="ChangeLog">: the changes
between releases,

<item><htmlurl url="groar/tests/NEWS" name="NEWS">: the news between
releases,

<item><htmlurl url="groar/tests/" name="groar-0.1.18.pre7.tar.gz">: the
latest version.

</itemize>

<p><htmlurl url="groar/" name="Official"> versions (<bf>please use the newer
test versions</bf>):
<itemize>
<item>(old)<htmlurl url="groar/groar-0.1.17.tar.gz" name="groar-0.1.17.tar.gz">
2000-11-04
<item>(older)<htmlurl url="groar/groar-0.1.16.tar.gz" name="groar-0.1.16.tar.gz">
2000-02-25
<item>(older)<htmlurl url="groar/groar-0.1.15.tar.gz" name="groar-0.1.15.tar.gz">
2000-01-29
<item>(older)<htmlurl url="groar/groar-0.1.14.tar.gz" name="groar-0.1.14.tar.gz">
2000-01-09
<item>(older)<htmlurl url="groar/groar-0.1.13.tar.gz" name="groar-0.1.13.tar.gz">
2000-01-07

</itemize>

<p><htmlurl url="groar/tests/" name="Test"> versions:
<itemize>
<item><htmlurl url="groar/tests/groar-0.1.18.pre7.tar.gz"
name="groar-0.1.18.pre7.tar.gz"> 2003-05-30
<item><htmlurl url="groar/tests/groar-0.1.18.pre6.tar.gz"
name="groar-0.1.18.pre6.tar.gz"> 2003-05-30
<item><htmlurl url="groar/tests/groar-0.1.18.pre5.tar.gz"
name="groar-0.1.18.pre5.tar.gz"> 2003-05-19
<item><htmlurl url="groar/tests/groar-0.1.18.pre4.tar.gz"
name="groar-0.1.18.pre4.tar.gz"> 2003-05-15
<item><htmlurl url="groar/tests/groar-0.1.18.pre3.tar.gz"
name="groar-0.1.18.pre3.tar.gz"> 2003-05-09
<p>
<item>(old)<htmlurl url="groar/tests/groar-0.1.18.pre2.tar.gz"
name="groar-0.1.18.pre2.tar.gz"> 2000-11-26
<item>(old)<htmlurl url="groar/tests/groar-0.1.18.pre1.tar.gz"
name="groar-0.1.18.pre1.tar.gz"> 2000-11-18
<p>
<item>(older)<htmlurl url="groar/tests/groar-0.1.17.pre3.tar.gz"
name="groar-0.1.17.pre3.tar.gz"> 2000-03-23
<item>(older)<htmlurl url="groar/tests/groar-0.1.17.pre2.tar.gz"
name="groar-0.1.17.pre2.tar.gz"> 2000-03-11
</itemize>

<item><bf><htmlurl url="http://www.groar.org/" name="titi"></bf> is a set of
<it>password "crypters"</it>

<p>Actually <bf>titi</bf> supports:
<itemize>
<item><it>DES</it>,
<item><it>MD5</it>,
<item><it>BlowFish</it> (BF),
<item><it>SHA1</it>,
<item><it>LanMan</it> (LM) & <it>NTLM</it> (with and without
challenge/response).
</itemize>

<p>Available files <htmlurl url="titi/" name="here"> are:
<itemize>

<item><htmlurl url="titi/titi.1" name="titi.1">: a text version of the
manual page,

<item><htmlurl url="titi/tests/ChangeLog" name="ChangeLog">: the changes
between releases,

<item><htmlurl url="titi/tests/NEWS" name="NEWS">: the news between
releases,

<item><htmlurl url="titi/tests/" name="titi-0.1.8.pre8.tar.gz">: the latest
version.

</itemize>

<p><htmlurl url="titi/" name="Official"> versions (<bf>please use the newer
test versions</bf>):
<itemize>
<item>(old)<htmlurl url="titi/titi-0.1.7.tar.gz" name="titi-0.1.7.tar.gz">
2000-11-04
<item>(old)<htmlurl url="titi/titi-0.1.6.tar.gz" name="titi-0.1.6.tar.gz">
2000-01-28
<item>(old)<htmlurl url="titi/titi-0.1.5.tar.gz" name="titi-0.1.5.tar.gz">
1999-12-15
</itemize>

<p><htmlurl url="titi/tests/" name="Test"> versions:
<itemize>
<item><htmlurl url="titi/tests/titi-0.1.8.pre8.tar.gz"
name="titi-0.1.8.pre8.tar.gz"> 2003-05-30
<item><htmlurl url="titi/tests/titi-0.1.8.pre7.tar.gz"
name="titi-0.1.8.pre7.tar.gz"> 2003-05-30
<item><htmlurl url="titi/tests/titi-0.1.8.pre6.tar.gz"
name="titi-0.1.8.pre6.tar.gz"> 2003-05-19
<item><htmlurl url="titi/tests/titi-0.1.8.pre5.tar.gz"
name="titi-0.1.8.pre5.tar.gz"> 2003-05-15
<item><htmlurl url="titi/tests/titi-0.1.8.pre4.tar.gz"
name="titi-0.1.8.pre4.tar.gz"> 2003-05-09

<p>

<item>(old)<htmlurl url="titi/tests/titi-0.1.8.pre3.tar.gz"
name="titi-0.1.8.pre3.tar.gz"> 2000-11-19
<item>(old)<htmlurl url="titi/tests/titi-0.1.8.pre2.tar.gz"
name="titi-0.1.8.pre2.tar.gz"> 2000-11-19
<item>(old)<htmlurl url="titi/tests/titi-0.1.8.pre1.tar.gz"
name="titi-0.1.8.pre1.tar.gz"> 2000-11-17

<p>

<item>(older)<htmlurl url="titi/tests/titi-0.1.7.pre7.tar.gz"
name="titi-0.1.7.pre7.tar.gz"> 2000-03-23
<item>(older)<htmlurl url="titi/tests/titi-0.1.7.pre6.tar.gz"
name="titi-0.1.7.pre6.tar.gz"> 2000-03-13
</itemize>

</itemize>

<p>Any comment is welcome at the following <htmlurl url="mailto:Denis.Ducamp
at groar.org" name="e-mail"> address.

<sect>Development

<p>Developed principally on:

<itemize>
<item>Linux: <htmlurl url="http://www.slackware.com/" name="Slackware"> 4
(libc5) and 7 (glibc2.1.2).
&nl;"slack" is certainly the best <htmlurl url="http://www.kernel.org/"
name="Linux"> distribution because the more stable.
<item><htmlurl url="http://www.openbsd.org/" name="OpenBSD"> 2.5 and 2.6
</itemize>

<p>Regularly tested on: 
<itemize>
<item>Linux: <htmlurl url="http://www.redhat.com/" name="redhat"> 6.0 and
<htmlurl url="http://www.debian.org/" name="debian"> (slink) 
<item><htmlurl url="http://www.freebsd.org/" name="FreeBSD"> 3.2 
<item><htmlurl url="http://www.sunfreeware.com/" name="Solaris"> 2.6 (sparc
- gcc 2.7.2.3) and 2.7 (intel - gcc 2.8.1)
</itemize>

<p>You must have installed <bf><htmlurl url="http://www.openssl.org/"
name="OpenSSL"></bf> before to compile <bf>groar</bf> and <bf>titi</bf>.
Development and tests are principally done with <it>OpenSSL-0.9.6</it>.
Previous tests done with 0.9.1c , 0.9.2b , 0.9.4 , 0.9.5beta1 and SSLeay 0.8
were great.

<p>Under <bf>OpenBSD</bf>, you can use the system ssl library:
<it>./configure --with-openbsd</it>.

<p>Under <bf>Solaris</bf>, my tests are done with openssl-SNAP-20000113 .

<p>Tests have been done under <bf>SunOS</bf>, <bf>AIX</bf>, <bf>DG/UX</bf>
and <bf>HP/UX</bf>. Please confirm <htmlurl url="mailto:ducamp at groar.org"
name="me"> what is working and what isn't.

<p><bf>groar</bf> and <bf>titi</bf> run only under <bf>Unix</bf> and I don't
think that I'll develop a ZindoZ version.

<p>Successfull compilations and executions (updated 2000/11/26):

<itemize>
<item>At home:
</itemize>

<table>
<tabular ca="c|r|l|c">
System name
	<colsep>Operating System
	<colsep>Processor
	<colsep>OpenSSL version
	<colsep>Compiler version
	<colsep>Date
	<colsep>Version
	<colsep>Known bugs
	<rowsep>
brett
	<colsep>Slackware 4 - 2.4.0-test4
	<colsep>PODP5V83 83Mhz
	<colsep>0.9.6
	<colsep>egcs-2.91.66
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
"
	<colsep>Slackware 4 - 2.4.0-test4
	<colsep>"
	<colsep>"
	<colsep>gcc 2.7.2.3
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
"
	<colsep>Slackware 4 - 2.2.13
	<colsep>"
	<colsep>0.9.4
	<colsep>"
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
light
	<colsep>Slackware 3.1 - 2.0.37
	<colsep>386SX 25 Mhz
	<colsep>0.9.4
	<colsep>gcc 2.7.2
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
sinclair
	<colsep>SunOS 5.7
	<colsep>PII 400 Mhz
	<colsep>0.9.4
	<colsep>gcc 2.95.2
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
"
	<colsep>OpenBSD 2.5
	<colsep>"
	<colsep>--with-openbsd
	<colsep>gcc 2.8.1
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
</tabular>
</table>

<itemize>
<item>At work (thanks to Hervé Schauer and all others):
</itemize>

<table>
<tabular ca="c|c|c|c|c">
System name
	<colsep>Operating System
	<colsep>Processor
	<colsep>OpenSSL version
	<colsep>Compiler version
	<colsep>Date
	<colsep>Version
	<colsep>Known bugs
	<rowsep>
A
	<colsep>Slackware 7.0 - 2.2.17
	<colsep>M.PII 400 Mhz
	<colsep>0.9.6
	<colsep>gcc 2.91.66
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
F
	<colsep>SunOS 5.6
	<colsep>sparc sun4m
	<colsep>0.9.4
	<colsep>gcc 2.7.2.3
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
G
	<colsep>SunOS 4.1.4
	<colsep>sparc sun4c
	<colsep>0.9.4
	<colsep>gcc 2.7.2.1
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
"
	<colsep>"
	<colsep>"
	<colsep>"
	<colsep>SunOS' non-ANSI cc
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>des doesn't work => lanman and lm are broken
	<rowsep>
"
	<colsep>"
	<colsep>"
	<colsep>SSLeay 0.8.1
	<colsep>gcc 2.7.2.1
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
H
	<colsep>RedHat 6.0 - 2.2.17
	<colsep>AMD-K6 450 Mhz
	<colsep>0.9.6
	<colsep>gcc 2.91.66
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
I
	<colsep>FreeBSD 3.4
	<colsep>PII 266 Mhz
	<colsep>0.9.5
	<colsep>gcc 2.7.2.3
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
A
	<colsep>Slackware 7.0 - 2.2.14
	<colsep>M.PII 400 Mhz
	<colsep>0.9.4
	<colsep>gcc 2.91.66
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
B
	<colsep>OpenBSD 2.6
	<colsep>P/MMX 233 Mhz
	<colsep>--with-openbsd
	<colsep>gcc 2.95.2
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
C
	<colsep>NetBSD 1.4ZD
	<colsep>PII 233 Mhz
	<colsep>0.9.5a
	<colsep>gcc 2.91.66
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
D
	<colsep>FreeBSD 3.2
	<colsep>P 120 Mhz
	<colsep>0.9.4
	<colsep>gcc 2.7.2.1
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
E
	<colsep>Debian slink - 2.2.12
	<colsep>PII 300 Mhz
	<colsep>0.9.4
	<colsep>gcc 2.7.2.3
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
H
	<colsep>RedHat 6.0 - 2.2.10
	<colsep>AMD-K6 450 Mhz
	<colsep>0.9.4
	<colsep>gcc 2.91.66
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
I
	<colsep>FreeBSD 3.4
	<colsep>PII 266 Mhz
	<colsep>0.9.2b
	<colsep>gcc 2.7.2.3
	<colsep>?
	<colsep>-
	<colsep>-
	<rowsep>
</tabular>
</table>

<itemize>
<item>Elsewhere, sometimes by someone else (thanks to each of you):
</itemize>

<table>
<tabular ca="c|c|c|c|c|c|c">
System name
	<colsep>Operating System
	<colsep>Processor
	<colsep>OpenSSL version
	<colsep>Compiler version
	<colsep>Date
	<colsep>Version
	<colsep>Known bugs
	<rowsep>
X (thanks)
	<colsep>AIX 4.2.1.0
	<colsep>???
	<colsep>???
	<colsep>cc 3.1.4.0
	<colsep>2000/12/06
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
spe155.testdrive.compaq.com
	<colsep>Compaq's Tru64 Unix 5.1
	<colsep>2x500MHz
	<colsep>0.9.6
	<colsep>Compaq C V ???
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
Z (thanks)
	<colsep>HP-UX B.11.00 U 9000/800
	<colsep>2x???MHz
	<colsep>0.9.6
	<colsep>(Bundled) cc
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
"
	<colsep>"
	<colsep>"
	<colsep>"
	<colsep>gcc 2.95.2
	<colsep>2000/11/26
	<colsep>0.1.18.pre2
	<colsep>-
	<rowsep>
Y (thanks)
	<colsep>SunOS 5.8
	<colsep>???
	<colsep>0.9.6
	<colsep>WorkShop Compilers 5.0
	<colsep>2000/11/21
	<colsep>0.1.18.pre1
	<colsep>-
	<rowsep>
spe155.testdrive.compaq.com
	<colsep>Compaq's Tru64 Unix 5.0
	<colsep>2x500MHz
	<colsep>0.9.5a
	<colsep>Compaq C V6.1-011
	<colsep>?
	<colsep>?
	<colsep>md4 doesn't work => ntlm is broken
	<rowsep>
linux.compile.sourceforge.net
	<colsep>
	<colsep>
	<colsep>
	<colsep>
	<colsep>
	<colsep>
	<colsep>
	<rowsep>
bsd.compile.sourceforge.net
	<colsep>
	<colsep>
	<colsep>
	<colsep>
	<colsep>
	<colsep>
	<colsep>
	<rowsep>
</tabular>                                                             
</table>

<sect>TODOs

<sect1>TODO
<p>
<enum>
<item>Change the license from the default GPL installed by automake by a BSD
license

&nl;Sorry but I'm doing an epidermic reaction about the "<em>GNU/Linux</em>"
term. Linux is under <em>GPL</em> but it isn't a project officially
supported by <em>gnu</em>: there isn't any link from the <htmlurl
url="http://www.gnu.org/" name="gnu site"> to the <htmlurl
url="http://www.kernel.org/" name="Linux"> one. I thank Richard Stallman for
all his work about Free Softwares but I think that he is wrong about
that.&lt/personnal message&gt;

<item>Change internal structures to: 

<itemize>
<item>Support algorithms with salt (DES, MD5, BlowFish and LanMan &
NTLM with challenge / response) 
<item>Support double hashes: that will speed up LanMan cracking
<item>Minimize memory used during cracking 
</itemize>

<item>Implement "<em>make test</em>" to speed up development: I need help
to know how to say to automake that I use shell scripts in "<em>make
test</em>" (or it tries to generate it from <em>cc</em> or it's impossible
to use "<em>make dist</em>").

<item>Improve portability: I'm looking for volunteers who have access to
systems I don't have access to, or people who can give me access to such
systems.

<item>Improve my personnal skills in programming: <em>C</em>,
<em>autoconf</em> &amp; <em>automake</em>, man pages, etc.

<item>Implement a system to distribute passwords generation.

</enum>

<sect1>DONE (last done first)
<p>
<enum>

<item>Implement "<em>groar -t</em>" to autotest crypt functions and
"<em>groar -b</em>" to do benchmarks (only because people generally love to
compare CPU performances).

<item>Use an avl tree to: 

<itemize>
<item>Minimize memory used during startup by the qsort function 
<item>Optimize the search of entries with a crypted password (my
dicotomic search is certainly FUBAR)
</itemize>

<item>Use installed openssl libraries instead of stolling files: the asm
version of sha1 is 3 times faster than the C one.
&nl;I know that openssl is very big and I use only a very small part of it:
its compilation lasted 26 hours on my 386sx25 with 4 MB of RAM and gcc 2.7.2
under Slackware 3.1

</enum>

<sect>Thanks

<p>I want to thank every one who:
<itemize>

<item>downloaded <bf>groar</bf> and/or <bf>titi</bf> and sent me an email
about that
<itemize>
<item><htmlurl url="http://www.openwall.com/" name="Solar Designer">: a very
great guy who makes very good jobs such as <htmlurl
url="http://www.openwall.com/john/" name="John the Ripper"> and <htmlurl
url="http://www.openwall.com/linux/" name="Linux kernel patch">
<item>and others... (what about having your name here ?)
</itemize>
<item>give me access to systems to test <bf>groar</bf> and <bf>titi</bf>:
<itemize>
<item><htmlurl url="http://www.hsc.fr/~schauer/" name="Hervé Schauer">: my
actual employer.
<item>and others... (what about having your name here ?)
</itemize>

</itemize>

<p>Once again: any comment is welcome at the following <htmlurl
url="mailto:ducamp at groar.org" name="e-mail"> adress.

<p>Have phun, 

<p><htmlurl url="mailto:ducamp at groar.org" name="Groar">

<p>This document in written in <htmlurl url="index.sgml" name="sgml">
(LinuxDoc DTD) and <htmlurl url="Makefile" name="translated"> in html with
<htmlurl url="http://www.sgmltools.org/" name="SGMLtools"> (version 1.0.9)
.

</article>
