3 ms·
This also shows that measurements of entropy are always relative to a particular party's knowledge, which is an interesting concept. (When we say that we're mea
by schoen 9y ago
This also shows that measurements of entropy are always relative to a particular party's knowledge, which is an interesting concept. (When we say that we're measuring the uncertainty that an attacker -- or message recipient -- has, that naturally depends on what the attacker or message recipient knows.)
- Ajedi32 9y agoUsually in entropy estimates you assume the attacker has full knowledge of the password generation method used. (Kerckhoff's principle.) In reality, most attackers won't know what generation method you used, but it's better not to rely on security by obscurity when it comes to passwords.