2 ms·
The only places I use 6 phrase diceware passwords ((6^5)^6 combinations) is FDE. I control the KDF and configure it to take at least a second on the host I am u
by Arch-TK 2y ago
The only places I use 6 phrase diceware passwords ((6^5)^6 combinations) is FDE. I control the KDF and configure it to take at least a second on the host I am using FDE on. Even if you take these modern KDFs and find a way to do them 1000000 times faster, thats still an average of 3.5 billion years to crack (assuming you know i used diceware, know my word list, and know how I have formatted the password).
I think I'll be fine.
Also, I use real dice.
Let me know if I calculated that wrong. The calculation was: (6^5)^6 / 1000000 / 2 / 60 / 60 / 24 / 365
The constants:
6 - sides on a D6
5 - dice per phrase
6 - phrases
1000000 - checked passwords per second (super optimistic, unrealistic hardware, outside even government reach)
2 - half way through a hypothetical dictionary attack
60 - seconds per minute
60 - minutes per hour
24 - hours per day
365 - days per year