<p>It will not help even if passwords were hashed with DSHA256. This link explains why. <a href="https://rya.nc/asic-cracking.html" rel="noreferrer">https://rya.nc/asic-cracking.html</a></p>

<p>Basically the ASIC loads the header into its memory and increments the nonce until the hash of the header is lower than the the specified target.</p>

<p>Therefore you cannot use this to brute force a password seeing as the logic is incompatible. </p>

CC BY-SA 3.0
2016-04-03T20:51:54.097Z
2016-04-09T06:31:08.900Z
2016-04-09T06:31:08.900Z
SentinalBais
<p>So, these answers are all great.  They are all missing one giant point.  ASICs are not ONLY for bitcoin miners, though the OP i believe was referring to mining ASICs.  But an ASIC (or Application Specific Integrated Circuit) can be designed for any number of calculations, such as password cracking.  I am certain at least nation state actors already have these.  So the answer is YES, ASICs can be used to crack passwords, but they would have to be specifically designed to crack passwords using a specific algorithm.</p>

CC BY-SA 4.0
2018-10-11T00:45:13.150Z
2018-10-11T00:45:13.150Z
Katerina
<p>Most mining ASICs are hard-coded to perform sha256(sha256(x)) which may as well be a random number with regard to sha256(x). The only way in which an ASIC would be useful for password cracking is if someone happened to be using sha256(sha256(password)) as their scheme, which to my knowledge is not in popular use anywhere.</p>

CC BY-SA 3.0
2015-08-05T22:02:16.933Z
but then I if the attacker knows that they have sha256(x) (which is likely disclosed in the code) and they have an ASIC that does sha256(sha256(x)) then all they would need to do is sha256(password_hash) an crack via ASIC :)
Rory McCune
CC BY-SA 3.0
2013-11-09T21:09:30.013Z
2013-11-09T21:09:30.013Z
David Perry
<p>You can design an ASIC to do any calculation you want. For example, let's say you stole a password database from a webpage. You know that the passwords were hashed using bcrypt. So you would need to create\buy an ASIC that does the bcrypt hash function. It would be faster at brute force cracking than a regular CPU\GPU. This would still take a very long time. An ASIC powerful enough to crack passwords would be very expensive. I believe the NSA dabbled in this dark art. They likely have machines dedicated to cracking specific hash functions.</p>

CC BY-SA 4.0
2019-11-14T18:47:20.700Z
2019-11-14T18:47:20.700Z
HackSlash
<p>A double hash brings you no closer to cracking the first one. Each hash makes the source harder to determine. There are an infinite number of sources that can produce the same hash value. An ASIC could aid a dictionary attack.</p>

CC BY-SA 3.0
2013-11-09T19:30:51.763Z
"An ASIC could aid a dictionary attack"

What do you mean by that?
Johnny
CC BY-SA 3.0
2013-11-09T20:21:17.313Z
I think a dictionary attack is exactly what the question is proposing: hash lots of strings  and see if any of them is the password.
Nate Eldredge
CC BY-SA 3.0
2013-11-09T19:16:10.927Z
2013-11-09T19:16:10.927Z
user7636
<p>Double SHA1 is very much in use in SQL password hashing. It is known as the 'MySQL 4.1+' hash type. How about hardware mods on an asic chip to perform double-sha1 decrypt instead of double-sha2-256? </p>

CC BY-SA 3.0
2016-11-24T15:02:04.100Z
This won't work since SHA1 and SHA256 are completely different algorithms when layed out in silicon. So this is not possible with existing hardware which is what OP is asking for.
cdecker
CC BY-SA 3.0
2016-11-01T01:48:51.687Z
2016-11-01T01:48:51.687Z
Paul
<p>All ASIC for Bitcoin do a double SHA256 hash on an arbitrary string. But maybe they might be used for pen testing :-)</p>

<p>Lets assume we have single SHA256 hash we want to crack. We also have an ASIC that does double SHA256. Well if we compare results computed by double SHA256 to passwords that generated SHA256 hash we will get nothing. But what if we do single SHA256 on SHA256 hash that we got on start using CPU, and then try to find SHA(SHA256(x))? If we find goodX it would be our password.</p>

<p>Would modifying firmware, or just mining proxy that feeds miner with work do the job?</p>

CC BY-SA 3.0
2015-03-24T21:07:28.123Z
Very similar to http://bitcoin.stackexchange.com/questions/9320/can-the-bitcoin-network-be-used-for-cracking, except that question asks if it's possible to use the Bitcoin network as a whole for password cracking.
Nick ODell
CC BY-SA 3.0
2018-04-20T16:05:47.637Z
Bitcoin mining ASICs can't compute SHA-256 of an arbitrary input at all. They take a block header template and search for a nonce where the double-sha256 is under some target value, and then just return that they're ready for more work or have found a matching nonce.
ryanc
<asic><sha256>
Using ASIC for password cracking - mad concept?
Johnny
# Using ASIC for password cracking - mad concept?

(Asked by: username_0 on 2013-11-09)

All ASIC for Bitcoin do a double SHA256 hash on an arbitrary string. But maybe they might be used for pen testing :-)

Lets assume we have single SHA256 hash we want to crack. We also have an ASIC that does double SHA256. Well if we compare results computed by double SHA256 to passwords that generated SHA256 hash we will get nothing. But what if we do single SHA256 on SHA256 hash that we got on start using CPU, and then try to find SHA(SHA256(x))? If we find goodX it would be our password.

Would modifying firmware, or just mining proxy that feeds miner with work do the job?

**Tags:** asic, sha256

> **Comments:**
> **username_1**: Very similar to http://bitcoin.stackexchange.com/questions/9320/can-the-bitcoin-network-be-used-for-cracking, except that question asks if it's possible to use the Bitcoin network as a whole for password cracking.  
> **username_2**: Bitcoin mining ASICs can't compute SHA-256 of an arbitrary input at all. They take a block header template and search for a nonce where the double-sha256 is under some target value, and then just return that they're ready for more work or have found a matching nonce.  

---

## 6 answers

### Answer by username_3 on 2016-04-03. Score: 4

It will not help even if passwords were hashed with DSHA256. This link explains why. <https://rya.nc/asic-cracking.html>

Basically the ASIC loads the header into its memory and increments the nonce until the hash of the header is lower than the the specified target.

Therefore you cannot use this to brute force a password seeing as the logic is incompatible.


---

### Answer by username_4 on 2018-10-11. Score: 2

So, these answers are all great. They are all missing one giant point. ASICs are not ONLY for bitcoin miners, though the OP i believe was referring to mining ASICs. But an ASIC (or Application Specific Integrated Circuit) can be designed for any number of calculations, such as password cracking. I am certain at least nation state actors already have these. So the answer is YES, ASICs can be used to crack passwords, but they would have to be specifically designed to crack passwords using a specific algorithm.


---

### Answer by username_5 on 2013-11-09. Score: 1

Most mining ASICs are hard-coded to perform sha256(sha256(x)) which may as well be a random number with regard to sha256(x). The only way in which an ASIC would be useful for password cracking is if someone happened to be using sha256(sha256(password)) as their scheme, which to my knowledge is not in popular use anywhere.

> **Comments:**
> **username_6**: but then I if the attacker knows that they have sha256(x) (which is likely disclosed in the code) and they have an ASIC that does sha256(sha256(x)) then all they would need to do is sha256(password_hash) an crack via ASIC :)  

---

### Answer by username_7 on 2019-11-14. Score: 0

You can design an ASIC to do any calculation you want. For example, let's say you stole a password database from a webpage. You know that the passwords were hashed using bcrypt. So you would need to create\buy an ASIC that does the bcrypt hash function. It would be faster at brute force cracking than a regular CPU\GPU. This would still take a very long time. An ASIC powerful enough to crack passwords would be very expensive. I believe the NSA dabbled in this dark art. They likely have machines dedicated to cracking specific hash functions.


---

### Answer by username_8 on 2013-11-09. Score: 0

A double hash brings you no closer to cracking the first one. Each hash makes the source harder to determine. There are an infinite number of sources that can produce the same hash value. An ASIC could aid a dictionary attack.

> **Comments:**
> **username_0**: "An ASIC could aid a dictionary attack"  What do you mean by that?  
> **username_9**: I think a dictionary attack is exactly what the question is proposing: hash lots of strings  and see if any of them is the password.  

---

### Answer by username_10 on 2016-11-01. Score: -1

Double SHA1 is very much in use in SQL password hashing. It is known as the 'MySQL 4.1+' hash type. How about hardware mods on an asic chip to perform double-sha1 decrypt instead of double-sha2-256?

> **Comments:**
> **username_11**: This won't work since SHA1 and SHA256 are completely different algorithms when layed out in silicon. So this is not possible with existing hardware which is what OP is asking for.  

---

