Hi Konrad, Lucas and List, On Fri, Feb 21, 2003 at 11:19:52AM +0100, Konrad Rieck wrote: > I am just wondering... You are talking about guessing a 33-digit > hexadecimal number? No, he was talking about guessing each hex-digit one at a time, so he will need 16*33=528 guesses to exhaust the whole "hash-space". See in Lucas' SQL: mid(user_password,n,1)=char(guess), the "algorithm" goes like this: for(n=0..32){ for(g='0'..'9','A'..'F') if( guessed_right(n,g) ){ hash[n]=g; break; } Chris -- First snow, then silence. This thousand dollar screen dies so beautifully. -- Simon Firth