3 ms·
Instead of running a dictionary on words, password crackers will run dictionaries on phrases (concatenated words). So in essence 1 word becomes equivalent to 1
by mikevm 13y ago
Instead of running a dictionary on words, password crackers will run dictionaries on phrases (concatenated words).
So in essence 1 word becomes equivalent to 1 character and since people will probably use less than 10 words these passwords might be easier to crack.
- DanBC 13y agoDiceware uses a known list of 7776 words. Imagine a 6 word phrase. 7776^6 = 2.2107391972073e+23 That's pretty good and that's only six words from a list of published words.
- ultramancool 13y agolog_2(7776^6)=77.5 bits of strength. Not too bad, but I wouldn't use it for anything cryptographic with local attack potential. If you want phrases to work properly, just put 1 (or many) non-dictionary word in them. This means the attack has to go to an alphabetic one instead of a phrase one, making it _much_ more painful.