UPDATE FOR THE CAUTIOUS: The patch is now a pull request on the JtR bleeding-jumbo github. It now supports openCL. Your passwords can be cracked at 70k+/s now.

So, the gist of the matter is: On my Tezos PDF I took the "PRIVATE KEY" QR as meaning an actual private key and did not take note of my password.

I need to bruteforce that bish.

You may have done the same, or lost it in another way.

There was a free tool provided by Jon in the Tezos telegram channel. After a month of running it was not yet over 200 million attempts. To me, this was not going to go fast enough.

I contracted the Hashsuite developers to sponsor a Tezos bruteforce feature. It wasn't free, nor was it too cheap, but if it can recover my password it is worth it.

They finished it in a couple days, with the help of Jon's work.

They created a patch for John the Ripper. For anyone familiar with bruteforcing JtR is quite well known.

After 2 days and 20 minutes the JtR patch is already nearly at what took the other program a month.

It's attempting 1430passwords/s on my laptop (i7-7700u). The devs benchmarked it at over 3k/s on their test computer.

I am here to share the tool with you guys.

Let me be clear: DONATIONS ARE HIGHLY APPRECIATED. I paid for this, the cost of the devs is about $250 an hour. I paid a flat rate due to agreeing beforehand rather than paying by devtime.

Address > 3NxiThn1UMbrQGXwaqJSGWGEYEAyjSYywQ

LINK TO PATCH (updated to Github, soon it will simply be a part of JtR. I removed the old patch link)

https://github.com/magnumripper/JohnTheRipper/pull/3317

DIRECTIONS TO ~~PATCH JTR~~  CRACK TEZOS:

git clone https://github.com/magnumripper/JohnTheRipper bleeding-jumbo
cd bleeding-jumbo
~~patch -p1 < /path/to/0001-Add-support-for-cracking-Tezos-keys.patch~~
cd src
./configure
make -sj8
cd ../run
The last bits, from the readme:
1. Run tezos2john.py and provide it with the required data. Run tezos2john.py
   without any options to see the usage instructions.

E.g. $ ../run/tezos2john.py 'put guide flat machine express cave hello connect stay local spike ski romance express brass' 'jbzbdybr.vpbdbxnn@tezos.example.org' 'tz1eTjPtwYjdcBMStwVdEcwY2YE3th1bXyMR' > hashes

2. Run john on the output of tezos2john.py script.

E.g. $ ../run/john hashes


As a disclaimer I have not yet cracked my password so I can't guarantee this works but the team is professional and thorough. 

This is OPTIMIZED. They ~~are still planning on releasing~~ released a simd version and an OPENCL to enable password attempts up to 100k/s  on GPU. The patches have been added to the official JtR jumbo repo. 

I truly hope this helps some of you.

Toss my donation down here again in case it actually works. Best of luck


![qr.png](https://cdn.steemitimages.com/DQmPhaVm8R35iqj1MHnFEKZnQXzfterSr64S8QfModoVHde/qr.png)