Hi,
I'm currently working on hashcat 7, and in comparison with version 6 (currently in Fedora Linux), the project copied a few components code into its own repo [1].
These new components, not in Fedora Linux already, and not already handled in hashcat 6 are:
* phc-winner-argon2. A reference implementation of argon2. License choice of Apache License 2 or CC0 1
* scrypt-jane. License choice of MIT or Public Domain
* sse2neon. License MIT
* yescrypt. License BSD-2-Clause (Simplified)
My initial investigation tells me there are not patents on any of these cryptography libs. I'm writing to ask if the legal team could please double check this to make sure everything is fine before proceeding with the update.
Thank you,
Carlos R.F.
On Friday, 24 October 2025 at 06:57, Carlos Rodriguez-Fernandez via legal wrote:
Hi,
I'm currently working on hashcat 7, and in comparison with version 6 (currently in Fedora Linux), the project copied a few components code into its own repo [1].
These new components, not in Fedora Linux already, and not already handled in hashcat 6 are:
[...]
- sse2neon. License MIT
FWIW, we do have sse2neon in Fedora: https://src.fedoraproject.org/rpms/sse2neon Please unbundle if possible and let me know if you have any issues with unbundling.
Regards, Dominik
Hi Dominik,
Thanks for pointing that out. It did work :). So I changed the spec and build to use the system one on aarch64.
Since you replied, hashcat 6 was also using its own copy of LZMA-SDK, version 24. The hashcat 6 package didn't have the `bundled` annotation, so I'll be adding it. The system lzma-sdk in rawhide is 25. However, even when I try to use lzma-sdk 24 from Fedora 42, there are several symbols missing at linking time. The symbols are in the .h files but when I look into the DSO, they are missing. For example, this is one of them (posting the cmd in case I'm missing something):
grep /usr/include/lzma-sdk/C/7zFile.h -e FileInStream_CreateVTable # it is in here, and it is implemented in the 7zFile.c
readelf -W -s -C /usr/lib64/liblzmasdk.so.24.09.0 | grep FileInStream_CreateVTable # missing from here.
The entire list:
/usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XzUnpacker_Code' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Sha256Prepare' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `FileInStream_CreateVTable' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XzUnpacker_Construct' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Crc64GenerateTable' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XzUnpacker_Init' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `File_Construct' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `InFile_Open' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_GetUnpackSize' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XzUnpacker_Free' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_ReadBackward' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_GetNumBlocks' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_Construct' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_Free' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XZ_SIG' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `File_Close'
Anyways, I may not be able to use it regardless because it depends on lzma-sdk 24. I'm at least adding the Provides bundled thing for this version 7.
Regards,
Carlos R.F.
On 10/25/25 4:29 AM, Dominik 'Rathann' Mierzejewski via legal wrote:
On Friday, 24 October 2025 at 06:57, Carlos Rodriguez-Fernandez via legal wrote:
Hi,
I'm currently working on hashcat 7, and in comparison with version 6 (currently in Fedora Linux), the project copied a few components code into its own repo [1].
These new components, not in Fedora Linux already, and not already handled in hashcat 6 are:
[...]
- sse2neon. License MIT
FWIW, we do have sse2neon in Fedora: https://src.fedoraproject.org/rpms/sse2neon Please unbundle if possible and let me know if you have any issues with unbundling.
Regards, Dominik
About the lzma-sdk issue, here is the problem isolated:
```
#include<lzma-sdk/C/7zFile.h> intmain() { FileInStream_CreateVTable(NULL); return0; } ``` ``` $ gcc -o 7ziptest -llzmasdk 7ziptest.c /usr/bin/ld: /tmp/cca2Gu2Q.o: in function `main': 7ziptest.c:(.text+0xa): undefined reference to `FileInStream_CreateVTable' collect2: error: ld returned 1 exit status ``` My guess is some compilation flag somewhere. Regards, Carlos R.F.
On 10/25/25 1:38 PM, Carlos Rodriguez-Fernandez wrote:
Hi Dominik,
Thanks for pointing that out. It did work :). So I changed the spec and build to use the system one on aarch64.
Since you replied, hashcat 6 was also using its own copy of LZMA-SDK, version 24. The hashcat 6 package didn't have the `bundled` annotation, so I'll be adding it. The system lzma-sdk in rawhide is 25. However, even when I try to use lzma-sdk 24 from Fedora 42, there are several symbols missing at linking time. The symbols are in the .h files but when I look into the DSO, they are missing. For example, this is one of them (posting the cmd in case I'm missing something):
grep /usr/include/lzma-sdk/C/7zFile.h -e FileInStream_CreateVTable # it is in here, and it is implemented in the 7zFile.c
readelf -W -s -C /usr/lib64/liblzmasdk.so.24.09.0 | grep FileInStream_CreateVTable # missing from here.
The entire list:
/usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XzUnpacker_Code' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Sha256Prepare' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `FileInStream_CreateVTable' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XzUnpacker_Construct' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Crc64GenerateTable' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XzUnpacker_Init' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `File_Construct' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `InFile_Open' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_GetUnpackSize' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XzUnpacker_Free' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_ReadBackward' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_GetNumBlocks' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_Construct' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `Xzs_Free' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `XZ_SIG' /usr/bin/ld: libhashcat.so.7.1.2: undefined reference to `File_Close'
Anyways, I may not be able to use it regardless because it depends on lzma-sdk 24. I'm at least adding the Provides bundled thing for this version 7.
Regards,
Carlos R.F.
On 10/25/25 4:29 AM, Dominik 'Rathann' Mierzejewski via legal wrote:
On Friday, 24 October 2025 at 06:57, Carlos Rodriguez-Fernandez via legal wrote:
Hi,
I'm currently working on hashcat 7, and in comparison with version 6 (currently in Fedora Linux), the project copied a few components code into its own repo [1].
These new components, not in Fedora Linux already, and not already handled in hashcat 6 are:
[...]
- sse2neon. License MIT
FWIW, we do have sse2neon in Fedora: https://src.fedoraproject.org/rpms/sse2neon Please unbundle if possible and let me know if you have any issues with unbundling.
Regards, Dominik
-
Carlos Rodriguez-Fernandez -
Dominik 'Rathann' Mierzejewski