Cracking programs:
Research:
- https://github.com/ryancdotorg/brainflayer
- https://bitcointalk.org/index.php?topic=1573035.0 (semi related to cracking brainwallets, although geared towards cracking addresses in general)
Research:
- https://rya.nc/cracking_cryptocurrency_brainwallets.pdf (defcon talk, not research paper but close enough)
- http://fc16.ifca.ai/preproceedings/36_Vasek.pdf
- https://eprint.iacr.org/2016/103.pdf
Sorry mate, but I've gone through these programs and "research" papers and I must say that if they have any value then it's rather entertaining than scientific.
Let me just refer to the last one from the list - this is their "conclusion" sections:
Quote
As an example application of this research, we have been able to crack thousands of passwords including some quite difficult ones. Our research demonstrates again that brain wallets are not secure and no one should use them.
And this is the list of the "quite difficult ones" that they are so proud of cracking:
Quote
1. say hello to my little friend
2. to be or not to be
3. Walk Into This Room
4. party like its 1999
5. yohohoandabottleofrum
6. dudewheresmycar
7. dajiahao
8. hankou
9. {1summer2leo3phoebe
10. 0racle9i
11. andreas antonopoulos
12. Arnold Schwarzenegger
13. blablablablablablabla
14. for the longest time
15. captain spaulding
2. to be or not to be
3. Walk Into This Room
4. party like its 1999
5. yohohoandabottleofrum
6. dudewheresmycar
7. dajiahao
8. hankou
9. {1summer2leo3phoebe
10. 0racle9i
11. andreas antonopoulos
12. Arnold Schwarzenegger
13. blablablablablablabla
14. for the longest time
15. captain spaulding
I mean, seriously?
What kind of idiot do you think would chose any of the above passwords to protect his life's savings?