3 ms·
What are you referring to? The only FIPS I know are crypto standards from NIST, and they seem pretty reasonable. (Except for the EC RNG of course lol.) Even the
by pingyong 7y ago
What are you referring to? The only FIPS I know are crypto standards from NIST, and they seem pretty reasonable. (Except for the EC RNG of course lol.) Even the NIST password recommendations are pretty reasonable IIRC, they recommend having no upper limit (or like 60+ characters) and not enforcing any kind of "you need at least 1 special sign and 2 numbers", except for a lower limit (at least 8 characters).