Geforce cracks Windows passwords

Security firms warned today that laptop hard disks should be encrypted as a matter of urgency following the release of a utility that uses graphics cards to crack Windows passwords.

An eight-character Windows password can be cracked in less than five days using version 2.0 of Moscom-based Elmscroft's Distributed Password Recovery System in conjunction with an Nvidia Geforce 8 card – something that would take months with a standard processor.

The time can be reduced further by adding graphics processors (GPUs) either within the same machine, or several machines, or both.

Graphics processors are more efficient at this class of task than general-purpose CPUs, taking advantage of parallel processing to deal with massive amounts of data.

The development means it will be far easier for thieves who steal company computers to break into them and obtain data for ID theft or sell to competitors.

ATI graphics cards can be used for a similar purpose but Nvidia has unveiled a framework called the Compute Unified Device Architecture (CUDA) and a software development kit for Windows and Linux that allows high-performance tasks to be offloaded to the graphics card.

Calum Macleod, security specialst Cyber-Ark's European director, said: " Elcomsoft's revelations are likely to send shock waves through the IT security world, as it shows that powerful off-the-shelf kit can be now used for advanced hacking procedures. If ever there was a wake-up call to companies of the need to encrypt their data, this is it."