3 ms·
Not if it's my password. I use ~100 bits of entropy.
by Buge 10y ago
Not if it's my password. I use ~100 bits of entropy.
- supergreg 10y agoCould the attacker find an easier to find string that matches the same md5 hash?
- Dylan16807 10y agoThe current best attack wrt matching an existing hash brings MD5's 128 bits of security down to 123. So no, that's not going to happen.
- throwaway729 10y agoHence "Strong passwords that need to be memorized" in OP's comment. Or else your memory is way better than mine (or I care way less, or probably both).
- Buge 10y agoWhether they need to be memorized or not does not make the statement "it will be leaked eventually anyway" more true. I use a password database so I don't memorize most of my passwords.
- throwaway729 10y agoWell, it does, because memory puts some limitations on length and complexity...
- Buge 10y agoIt is possible to memorize a 100 bit password. I once had a 1000 word poem memorized, and could write it down flawlessly from memory. I agree that it's not worth memorizing, you should instead use a password database. But I still maintain my original point that there's no reason to assume that your password will be leaked eventually if you use a strong password.