Hi fellow hash crackers,

I splitted my implementation of DPAPI masterkey file in hashcat in 2 separate formats:

• 15300, for masterkey file v1
• 15900, for masterkey file v2

Performances should not be impacted (a bit better though, as a conditionnal branchment was removed in the __loop workload) but this is better for visibility and real performances evaluation while doing benchmarks.
Indeed version 1, which concerns DPAPI until Microsoft Vista (and workstations that migrated from XP or Vista), is using hmac-sha1 and 3DES, whereas version 2, which concerns DPAPI beginning with 7, is using hmac-sha512 and AES256.
Thus perfomances vary between these 2 versions (even if the Windows 10 client version is not that worse compared with Vista, which is quite a fail...).

Cheers!

PS: all tests have been successfully passed with test.pl