3 ms·
That is massive overkill. 128 bits of security is way more than sufficient. 23 characters (uppercase, lowercase, numbers) already gives much security. Honestl
by rocqua 10y ago
That is massive overkill.
128 bits of security is way more than sufficient. 23 characters (uppercase, lowercase, numbers) already gives much security.
Honestly, 128 bits is already overkill. An attacker that determined is probably quite proficient at rubber hose cryptography.
The point of PW manager is to prevent compromise from spreading. Not to keep a motivated NSA out of your PC.
- theandrewbailey 10y agoI know, but that's a good property to have, it's easy to do, and the extra costs are insignificant.
- rocqua 10y agoIt's a useless property to have, and the extra costs make it much harder to transcribe by hand. Never mind the fact that using non-ascii is asking for compatibility problems. Honestly, diceware[1] is probably an even better choice, though it sometimes fails symbol count requirements. [1] http://world.std.com/~reinhold/diceware.html http://world.std.com/~reinhold/diceware.html