> That said, what is the current crack rate for SRP on a GPU for 7, 8 and 10 character passwords? That is a really good question, SRP is actually pretty seriou

> That said, what is the current crack rate for SRP on a GPU for 7, 8 and 10 character passwords? That is a really good question, SRP is actually pretty serious. Based on the small amount I know about SRP, a simple rainbow table brute force attack would take a VERY VERY long time per hash; even on an extremely fast multiple gpu rig. Somebody with more specific knowledge about SRP could probably calculate an exact number. However, since they have stolen other information (perhaps even some, like the modifier, salt or modulo data, that they have not disclosed) they could possibly create a more advanced and targeted rainbow table attack which would greatly reduce the time it would take per account.