4 ms·
Hashcat 2017 – OpenCL cracks 10 digit WPA2 passwords on a modest laptop
- DanBC 10y ago> Despite XKCD, beware of pass-phrases thanks to modern markov chains and dictionaries. XKCD's 2^44 is only slightly better than ten random hexadecimal digits. Though, in good salt we can trust How do markov chains and dictionaries help with diceware passphrases?
- contingencies 10y agoIf passphrases contain 'memorable' word-like sounds, predictable structures or real words as a basis they can be attacked more efficiently. Often password generators have such modes. 2^44 = ~10 hexadecimal digits, but to be fair the example was purely alphabetic and about double the length, so this is apples and oranges.
- mhurd 10y agoA way to help increase the entropy in diceware passphrases may be to use a big of capitalisation or leet speak substitution. I think Hashcat's stats processor can use Markov Chains to assist in chasing you down those rabbit hole likelihoods with appropriate rulesets.