4 ms·
> "122079103" and "toldulbal" (tolerably dull ball) are equally hard to attack. I believe this is only holds if the attacker has no further information on the
by brute 12y ago
> "122079103" and "toldulbal" (tolerably dull ball) are equally hard to attack.
I believe this is only holds if the attacker has no further information on the password generation procedure. In the generated passwords, vocals are almost guaranteed to occur at least once in every triple. Also certain consonants have a higher probability to occur together, due to contraints of the english language. This should decrease entropy.
- Scaevolus 12y agoIt generates passwords by repeatedly picking a random 3-letter prefix from a pool of 1024 ("tol dul bal"), then generating a phrase that would abbreviate to that password ("tolerably dull ball"). This makes analyzing the effective entropy easy. 1024 possibilities for each group of 3 characters is approximately equal to 1000 possibilities for each group of 3 numbers.