3 ms·

Barely. Trying all the passwords less than N characters long is way cheaper than trying the ones that are exactly N.

• cmdrfred 10y ago
  Best case scenario wouldn't you have to do both without knowing the length?
  • thfuran 10y ago
    Right but even with alphanumeric only, only about 2% of passwords of length N or less are less than length N.
    • baddox 10y ago
      The advantage is having the upper bound.