.\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is >0, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{\ . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title "Authen::Passphrase::LANManager 3pm" .TH Authen::Passphrase::LANManager 3pm "2022-06-08" "perl v5.34.0" "User Contributed Perl Documentation" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" Authen::Passphrase::LANManager \- passphrases using the LAN Manager hash algorithm .SH "SYNOPSIS" .IX Header "SYNOPSIS" .Vb 1 \& use Authen::Passphrase::LANManager; \& \& $ppr = Authen::Passphrase::LANManager\->new( \& hash_hex => "855c3697d9979e78ac404c4ba2c66533"); \& \& $ppr = Authen::Passphrase::LANManager\->new( \& passphrase => "passphrase"); \& \& $ppr = Authen::Passphrase::LANManager\->from_rfc2307( \& "{LANMAN}855c3697d9979e78ac404c4ba2c66533"); \& \& $hash = $ppr\->hash; \& $hash_hex = $ppr\->hash_hex; \& \& $ppr0 = $ppr\->first_half; \& $ppr1 = $ppr\->second_half; \& \& if($ppr\->match($passphrase)) { ... \& \& $userPassword = $ppr\->as_rfc2307; .Ve .SH "DESCRIPTION" .IX Header "DESCRIPTION" An object of this class encapsulates a passphrase hashed using the Microsoft \s-1LAN\s0 Manager hash function. This is a subclass of Authen::Passphrase, and this document assumes that the reader is familiar with the documentation for that class. .PP The hash algorithm can be used on up to fourteen Latin\-1 characters of passphrase. First the passphrase is folded to uppercase, and zero-padded to fourteen bytes. Then it is split into two halves. Each seven-byte half is used as a 56\-bit \s-1DES\s0 key, to encrypt the fixed plaintext block \&\*(L"\s-1KGS\s0!@#$%\*(R". The eight-byte ciphertexts are concatenated to form the sixteen-byte hash. There is no salt. .PP Because the two halves of the passphrase are hashed separately, it is possible to manipulate (e.g., crack) a half hash in isolation. See Authen::Passphrase::LANManagerHalf. .PP \&\fIWarning:\fR Don't even think about using this seriously. It's an exceptionally weak design, flawed in pretty much every respect. .SH "CONSTRUCTORS" .IX Header "CONSTRUCTORS" .IP "Authen::Passphrase::LANManager\->new(\s-1ATTR\s0 => \s-1VALUE, ...\s0)" 4 .IX Item "Authen::Passphrase::LANManager->new(ATTR => VALUE, ...)" Generates a new passphrase recogniser object using the \s-1LAN\s0 Manager hash algorithm. The following attributes may be given: .RS 4 .IP "\fBhash\fR" 4 .IX Item "hash" The hash, as a string of 16 bytes. .IP "\fBhash_hex\fR" 4 .IX Item "hash_hex" The hash, as a string of 32 hexadecimal digits. .IP "\fBpassphrase\fR" 4 .IX Item "passphrase" A passphrase that will be accepted. .RE .RS 4 .Sp Either the hash or the passphrase must be given. .RE .IP "Authen::Passphrase::LANManager\->from_rfc2307(\s-1USERPASSWORD\s0)" 4 .IX Item "Authen::Passphrase::LANManager->from_rfc2307(USERPASSWORD)" Generates a \s-1LAN\s0 Manager passphrase recogniser from the supplied \s-1RFC2307\s0 encoding. The string must consist of "\fB{\s-1LANMAN\s0}\fR\*(L" (or its synonym \&\*(R"\fB{\s-1LANM\s0}\fR") followed by the hash in hexadecimal; case is ignored. .SH "METHODS" .IX Header "METHODS" .ie n .IP "$ppr\->hash" 4 .el .IP "\f(CW$ppr\fR\->hash" 4 .IX Item "$ppr->hash" Returns the hash value, as a string of 16 bytes. .ie n .IP "$ppr\->hash_hex" 4 .el .IP "\f(CW$ppr\fR\->hash_hex" 4 .IX Item "$ppr->hash_hex" Returns the hash value, as a string of 32 hexadecimal digits. .ie n .IP "$ppr\->first_half" 4 .el .IP "\f(CW$ppr\fR\->first_half" 4 .IX Item "$ppr->first_half" Returns the hash of the first half of the passphrase, as an Authen::Passphrase::LANManagerHalf passphrase recogniser. .ie n .IP "$ppr\->second_half" 4 .el .IP "\f(CW$ppr\fR\->second_half" 4 .IX Item "$ppr->second_half" Returns the hash of the second half of the passphrase, as an Authen::Passphrase::LANManagerHalf passphrase recogniser. .ie n .IP "$ppr\->match(\s-1PASSPHRASE\s0)" 4 .el .IP "\f(CW$ppr\fR\->match(\s-1PASSPHRASE\s0)" 4 .IX Item "$ppr->match(PASSPHRASE)" .PD 0 .ie n .IP "$ppr\->as_rfc2307" 4 .el .IP "\f(CW$ppr\fR\->as_rfc2307" 4 .IX Item "$ppr->as_rfc2307" .PD These methods are part of the standard Authen::Passphrase interface. .SH "SEE ALSO" .IX Header "SEE ALSO" Authen::Passphrase, Authen::Passphrase::LANManagerHalf, Crypt::DES .SH "AUTHOR" .IX Header "AUTHOR" Andrew Main (Zefram) .SH "COPYRIGHT" .IX Header "COPYRIGHT" Copyright (C) 2006, 2007, 2009, 2010, 2012 Andrew Main (Zefram) .SH "LICENSE" .IX Header "LICENSE" This module is free software; you can redistribute it and/or modify it under the same terms as Perl itself.