# hashcat: what changed from 6 to 7

- Product: hashcat (https://whatsnew.fyi/product/hashcat)
- Vendor: hashcat team
- Range: changelog entries numbered after v6.2.6 up to and including v7.1.2, stable releases only
- Entries below: 4 releases (newest first)
- Resolved: 6 is v6.2.6 and 7 is v7.1.2, the newest stable release of each major we track
- Carrying security changes: 0 · CVEs mentioned: 0 · Mentioning breaking changes: 0 · Removing or deprecating something: 0
- Page: https://whatsnew.fyi/product/hashcat/compare/6...7

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## What changed (50 changes, grouped by kind)

### Added

#### v7.1.2 (2025-08-23)

- Introduce Rust bridge plugin for writing hash-mode extensions in Rust

#### v7.1.0 (2025-08-16)

- AS/400 DES hash mode
- AS/400 SSHA1 hash mode
- Blockchain, My Wallet, Legacy Wallets hash mode
- Cisco-ISE Hashed Password (SHA256) hash mode
- LUKS2 (Argon2i KDF type) hash mode
- KeePass (KDBX v4) hash mode
- SAP CODVN H (PWDSALTEDHASH) isSHA512 hash mode
- sm3crypt $sm3$, SM3 (Unix) hash mode
- BLAKE2b-256 hash mode
- BLAKE2b-256($pass.$salt) hash mode
- BLAKE2b-256($salt.$pass) hash mode
- MD6 (256) hash mode
- sha224($pass.$salt) hash mode
- sha224($salt.$pass) hash mode
- sha224(sha1($pass)) hash mode
- sha224(sha224($pass)) hash mode
- Attack-Modes use 64-bit counters for amplifier keyspace
- Initial support for running hashcat inside Docker

#### v7.0.0 (2025-08-01)

- Assimilation Bridge to integrate external resources like CPUs, FPGAs, and embedded interpreters into the cracking pipeline
- Python Bridge Plugin for implementing hash-matching logic in Python without recompilation, with multithreading and rule engine support
- Virtual Backend Devices that partition physical GPUs into multiple logical devices for better bridge integration and async workloads
- Hash-Mode Autodetection to omit the -m flag and automatically detect hash-modes or use --identify to list possibilities
- Docker Build Support for fully containerized, cross-platform building including cross-compilation to Windows
- 58 new application-specific hash types including Argon2, MetaMask, Microsoft Online Account, SNMPv3, GPG, OpenSSH, and LUKS2
- 17 new generic hash constructions used in real-world web apps and protocols
- 11 new primitives added to the crypto library to improve reuse and plugin development
- 20 new tools to extract hashes from popular sources including APFS, Virtualbox, BitLocker, and various wallet formats
- HIP backend as first-class support for AMD, now preferred over OpenCL when both are available
- Metal backend for native GPU support on macOS including full Apple Silicon compatibility
- Support for 8 custom charsets in mask engine with -5 to -8 flags
- JSON support added to status and info commands
- Handling for compressed wordlists and improved I/O error recovery

### Changed

#### v7.1.2 (2025-08-23)

- Add initial documentation for Rust bridge plugin in hashcat-rust-plugin-requirements.md

#### v7.1.0 (2025-08-16)

- Host memory query method updated
- Device memory handling warns instead of waiting on high GPU memory usage
- Python Bridge improved support from 1:1 password-to-hash to 1:N password-to-hashes
- Python Bridge stand-alone debugging of stubs improved

#### v7.0.0 (2025-08-01)

- Complete refactor of the autotuning engine for better device utilization
- Major rewrite of memory management to eliminate 4GB allocation caps and enable full memory usage across devices
- Improved tuning for hash-modes including NTLM, NetNTLMv2, and RAR3 with performance gains up to 320% for scrypt, 54% for RAR3, and 223% for NetNTLMv2
- Status screen improvements including better kernel info, new keybind support, and improved quiet mode
- Rule engine enhancements with new character class logic, rejection rules, and refactored rule logic

### Fixed

#### v7.1.2 (2025-08-23)

- Restore backward compatibility in machine-readable status view mode that was broken in v7.1.0
- Fix issues in Argon2 libraries when used in multi-hash modes

#### v7.1.1 (2025-08-18)

- multi-hash handling in LUKS2
- multi-hash handling in KeePass (KDBX4)

#### v7.1.0 (2025-08-16)

- Python Bridge unsalted hashlist support
- Python Bridge esalt structure size

#### v7.0.0 (2025-08-01)

- Memory allocation and buffer size issues across backends

## Release notes

### v7.1.2 — hashcat v7.1.2

- Date: 2025-08-23
- Version: v7.1.2
- Original notes: https://github.com/hashcat/hashcat/releases/tag/v7.1.2
- Permalink: https://whatsnew.fyi/product/hashcat/releases/v7.1.2
- Labels: Platforms: Desktop

- **fixed** — Restore backward compatibility in machine-readable status view mode that was broken in v7.1.0
- **fixed** — Fix issues in Argon2 libraries when used in multi-hash modes
- **added** — Introduce Rust bridge plugin for writing hash-mode extensions in Rust
- **changed** — Add initial documentation for Rust bridge plugin in hashcat-rust-plugin-requirements.md

Welcome to the hashcat v7.1.2 release!

This hotfix restores backward compatibility in machine-readable status view mode, which was broken in v7.1.0 and affected third-party overlays such as the Hashtopolis agent. It also fixes issues in the Argon2 libraries when used in multi-hash modes. If you are using hashcat v7.1.0+ with LUKS2 or KeePass KDBX4, updating is strongly recommended.

The release also introduces a new assimilation bridge plugin, the Rust bridge. Just like the Python bridge plugin, which lets you write hash-mode extensions in Python instead of C, you can now do the same in Rust. This is a valuable community contribution that will be covered in more detail in the next release notes. The feature is already fully functional and ready for early adoption, with initial documentation available in hashcat-rust-plugin-requirements.md.

For the full list of changes, please see docs/changes.txt.

### v7.1.1 — hashcat v7.1.1

- Date: 2025-08-18
- Version: v7.1.1
- Original notes: https://github.com/hashcat/hashcat/releases/tag/v7.1.1
- Permalink: https://whatsnew.fyi/product/hashcat/releases/v7.1.1
- Labels: Platforms: Desktop

- **fixed** — multi-hash handling in LUKS2
- **fixed** — multi-hash handling in KeePass (KDBX4)

Welcome to hashcat 7.1.1 release!

This hotfix addresses issues related to multi-hash handling in LUKS2 and KeePass (KDBX4). Single-hash cases were not affected. It also includes some other minor changes.

If you are looking for release notes please refer to docs/changes.txt.

### v7.1.0 — hashcat v7.1.0

- Date: 2025-08-16
- Version: v7.1.0
- Original notes: https://github.com/hashcat/hashcat/releases/tag/v7.1.0
- Permalink: https://whatsnew.fyi/product/hashcat/releases/v7.1.0
- Labels: Platforms: Desktop

- **added** — AS/400 DES hash mode
- **added** — AS/400 SSHA1 hash mode
- **added** — Blockchain, My Wallet, Legacy Wallets hash mode
- **added** — Cisco-ISE Hashed Password (SHA256) hash mode
- **added** — LUKS2 (Argon2i KDF type) hash mode
- **added** — KeePass (KDBX v4) hash mode
- **added** — SAP CODVN H (PWDSALTEDHASH) isSHA512 hash mode
- **added** — sm3crypt $sm3$, SM3 (Unix) hash mode
- **added** — BLAKE2b-256 hash mode
- **added** — BLAKE2b-256($pass.$salt) hash mode
- **added** — BLAKE2b-256($salt.$pass) hash mode
- **added** — MD6 (256) hash mode
- **added** — sha224($pass.$salt) hash mode
- **added** — sha224($salt.$pass) hash mode
- **added** — sha224(sha1($pass)) hash mode
- **added** — sha224(sha224($pass)) hash mode
- **added** — Attack-Modes use 64-bit counters for amplifier keyspace
- **added** — Initial support for running hashcat inside Docker
- **changed** — Host memory query method updated
- **changed** — Device memory handling warns instead of waiting on high GPU memory usage
- **fixed** — Python Bridge unsalted hashlist support
- **fixed** — Python Bridge esalt structure size
- **changed** — Python Bridge improved support from 1:1 password-to-hash to 1:N password-to-hashes
- **changed** — Python Bridge stand-alone debugging of stubs improved

---
Welcome to **hashcat v7.1.0**!
---

This is a minor release, but an important one. It comes just two weeks after the major v7.0.0 update, as part of our effort to keep release cycles shorter than in the past.

Although two weeks may seem quick, this version includes several important bug fixes along with notable new features and hash modes, which makes a v7.1.0 release fully justified.

If you have 5 minutes, here's the full writeup: [Full Release Notes and detailed writeup](https://github.com/hashcat/hashcat/blob/v7.1.0/docs/releases_notes_v7.1.0.pdf)

---

##### New Algorithms

 - AS/400 DES
 - AS/400 SSHA1
 - Blockchain, My Wallet, Legacy Wallets
 - Cisco-ISE Hashed Password (SHA256)
 - LUKS2 (Argon2i KDF type)
 - KeePass (KDBX v4)
 - SAP CODVN H (PWDSALTEDHASH) isSHA512
 - sm3crypt $sm3$, SM3 (Unix)
 - BLAKE2b-256
 - BLAKE2b-256($pass.$salt)
 - BLAKE2b-256($salt.$pass)
 - MD6 (256) 
 - sha224($pass.$salt)
 - sha224($salt.$pass)
 - sha224(sha1($pass))
 - sha224(sha224($pass))

---

##### New Features

 - Attack-Modes: Use 64-bit counters for amplifier keyspace
 - Host Memory: Update method to query free host memory
 - Add initial support for running hashcat inside Docker
 - Device Memory: Warn instead of waiting on high GPU memory usage
 - ... a lot more
 - See full writeup for details

---

##### Python Bridge

 - Fix unsalted hashlist support
 - Fix the esalt structure, it was too large
 - Improve support from 1:1 password-to-hash to 1:N password-to-hashes
 - Improve stand-alone debugging of Python Bridge stubs
 - See full writeup for details

---

This release was made possible thanks to the work of the **hashcat community**. 

We appreciate the time, skill, and testing effort that went into it and especially from those submitting fixes, reporting bugs, and helping improve portability.

### v7.0.0 — hashcat v7.0.0

- Date: 2025-08-01
- Version: v7.0.0
- Original notes: https://github.com/hashcat/hashcat/releases/tag/v7.0.0
- Permalink: https://whatsnew.fyi/product/hashcat/releases/v7.0.0
- Labels: Platforms: Desktop

- **added** — Assimilation Bridge to integrate external resources like CPUs, FPGAs, and embedded interpreters into the cracking pipeline
- **added** — Python Bridge Plugin for implementing hash-matching logic in Python without recompilation, with multithreading and rule engine support
- **added** — Virtual Backend Devices that partition physical GPUs into multiple logical devices for better bridge integration and async workloads
- **added** — Hash-Mode Autodetection to omit the -m flag and automatically detect hash-modes or use --identify to list possibilities
- **added** — Docker Build Support for fully containerized, cross-platform building including cross-compilation to Windows
- **added** — 58 new application-specific hash types including Argon2, MetaMask, Microsoft Online Account, SNMPv3, GPG, OpenSSH, and LUKS2
- **added** — 17 new generic hash constructions used in real-world web apps and protocols
- **added** — 11 new primitives added to the crypto library to improve reuse and plugin development
- **added** — 20 new tools to extract hashes from popular sources including APFS, Virtualbox, BitLocker, and various wallet formats
- **added** — HIP backend as first-class support for AMD, now preferred over OpenCL when both are available
- **added** — Metal backend for native GPU support on macOS including full Apple Silicon compatibility
- **added** — Support for 8 custom charsets in mask engine with -5 to -8 flags
- **added** — JSON support added to status and info commands
- **added** — Handling for compressed wordlists and improved I/O error recovery
- **changed** — Complete refactor of the autotuning engine for better device utilization
- **changed** — Major rewrite of memory management to eliminate 4GB allocation caps and enable full memory usage across devices
- **changed** — Improved tuning for hash-modes including NTLM, NetNTLMv2, and RAR3 with performance gains up to 320% for scrypt, 54% for RAR3, and 223% for NetNTLMv2
- **changed** — Status screen improvements including better kernel info, new keybind support, and improved quiet mode
- **changed** — Rule engine enhancements with new character class logic, rejection rules, and refactored rule logic
- **fixed** — Memory allocation and buffer size issues across backends

---
Welcome to **hashcat v7.0.0**!
---

We're proud to announce the release of **hashcat v7.0.0**, the result of over two years of development, hundreds of features and fixes, and a complete refactor of several key components. This version also includes all accumulated changes from the v6.2.x minor releases.

This release is huge. If you have 30 minutes, here's the writeup: [Full Release Notes and detailed writeup](https://github.com/hashcat/hashcat/blob/v7.0.0/docs/releases_notes_v7.0.0.pdf)

Here's a quick summary:

- Over 900,000 lines of code changed  
- Contributions from 105 developers, including 74 first-time contributors  
- Merged and documented all previously unannounced 6.2.x features  

---

##### Major New Features

- **Assimilation Bridge**: Integrate external resources like CPUs, FPGAs, embedded interpreters, and more into the cracking pipeline.  
- **Python Bridge Plugin**: Rapidly implement hash-matching logic in Python. No recompilation needed, supports multithreading and rule engine by default.  
- **Virtual Backend Devices**: Internally partitions physical GPUs into multiple logical devices for better bridge integration and async workloads.  
- **Hash-Mode Autodetection**: Omit the `-m` flag and let Hashcat detect the hash-mode, or use `--identify` to list possibilities.  
- **Docker Build Support**: Build Hashcat in a fully containerized, cross-platform environment, including cross-compilation to Windows.  

---

##### New Algorithm Support

- 58 new application-specific hash types, including Argon2, MetaMask, Microsoft Online Account, SNMPv3, GPG, OpenSSH, and LUKS2
- 17 new generic hash constructions used in real-world web apps and protocols  
- 11 new primitives added to the crypto library, improving reuse and plugin development  
- 20 new tools to extract hashes from popular sources, including APFS, Virtualbox, BitLocker, and various wallet formats  

---

##### Performance Improvements

- Complete refactor of the autotuning engine for better device utilization  
- Major rewrite of memory management to eliminate previous 4GB allocation caps and enable full memory usage across devices  
- Improved tuning for hash-modes like NTLM, NetNTLMv2, and RAR3  
- Updated tuning database entries and lower overhead for multi-device setups  
- Optimizations to several individual hash-modes including:
  - scrypt: up to **+320%**  
  - RAR3: up to **+54%**  
  - NetNTLMv2: **+223%** (Intel)  

[Full Benchmark Spreadsheet](https://docs.google.com/spreadsheets/d/1V43YK_SxVFyDJH8lw707wciovgVJW6qWUer8PfRK5Ew)

---

##### New and Updated Backends

- **HIP (AMD):** First-class support for AMD's HIP backend, now preferred over OpenCL when both are available  
- **Metal (Apple):** Native GPU support on macOS using Metal, including full Apple Silicon compatibility and major speed improvements  

---

##### Plugin and Developer Changes

- Improved diagnostics, tokenizer control, and debugging options  
- New reusable infrastructure for integrating algorithms directly into both modules and kernels  
- Expanded test coverage, edge-case detection, and cross-platform compatibility improvements  

---

##### Rule Engine Enhancements

- Support for new character class logic and rejection rules, increasing rule engine flexibility  
- Refactored and cleaned up rule logic to improve reliability  
- Several commonly used rule files have been optimized and expanded  

---

##### Additional Improvements

- Mask engine now supports 8 custom charsets (`-5` to `-8`)  
- Status screen improvements: better kernel info, new keybind support, improved quiet mode  
- New output formats: JSON support added to status and info commands  
- Improved benchmark defaults: better masks, longer duration, more consistent output  
- Updated 3rd-party dependencies and build fixes across all platforms  
- Added handling for compressed wordlists and better I/O error recovery  
- Fal

_[Truncated at 4000 characters — full notes: https://github.com/hashcat/hashcat/releases/tag/v7.0.0]_