Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #190210

Re: LUKS password gets printed as stars

From Curt <curty@free.fr>
Newsgroups linux.debian.user
Subject Re: LUKS password gets printed as stars
Date 2017-12-23 16:20 +0100
Message-ID <uZTKF-1bS-9@gated-at.bofh.it> (permalink)
References <uY9qx-4wW-5@gated-at.bofh.it> <uZD3b-6uT-11@gated-at.bofh.it> <uZRzb-7YE-5@gated-at.bofh.it> <uZSbU-8u2-1@gated-at.bofh.it>
Organization Unorganized

Show all headers | View raw


On 2017-12-23, Hans <hans.ullrich@loop.de> wrote:
>
> But 1 percent longer for each added digit sounds not much. However, when it 
> comes to more digits, let's say 16 (WPA2 often uses 16 digits with only 
> letters and numbers), then the time to crack will increase rapidely.
>
> If I understood you correct, and please correct me if I am wrong, this is 1 
> percent of the time for trying all combinations with one lesser digit.
>
> And I suppose, guessing 15 digits will cause a loooooong time, and 1 percent 
> of this looooong time plus another much more looooooong time will result in a 
> very looooooooooong time. So, the more unnecessary digits, the better.

(Assuming all 95 printable ascii characters) link to % time savings:
 
http://www.wolframalpha.com/input/?i=%28sum%20from%20n%3D1%20to%20n%3D16%20of%2095%5En%20%29%20%2F%2095%5E17&dataset=&equal=Submit

Quote:

 An interesting mathematical quirk about this ratio of the number of passwords
 shorter than n, over the number of passwords of length n, is that it doesn't
 really depend on n. This is because we're already very close to the asymptote
 of 1/95 = 0.0105. So an attacker gets the same relative, or percentage, time
 savings from this trick regardless of the length of your password; it's always
 between 1% - 2%. Though, of course, the absolute time that it takes grows
 orders of magnitude with each new character that you add.

https://security.stackexchange.com/questions/92233/how-critical-is-it-to-keep-your-password-length-secret


-- 
"An autobiography is only to be trusted when it reveals something disgraceful.
A man who gives a good account of himself is probably lying, since any life
when viewed from the inside is simply a series of defeats."
— George Orwell

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: LUKS password gets printed as stars root kea <rootkea@gmail.com> - 2017-12-18 20:40 +0100
  Re: LUKS password gets printed as stars tomas@tuxteam.de - 2017-12-18 21:30 +0100
    Re: LUKS password gets printed as stars deloptes <deloptes@gmail.com> - 2017-12-18 22:30 +0100
    Re: LUKS password gets printed as stars root kea <rootkea@gmail.com> - 2017-12-19 19:00 +0100
      Re: LUKS password gets printed as stars tomas@tuxteam.de - 2017-12-19 19:30 +0100
        Re: LUKS password gets printed as stars root kea <rootkea@gmail.com> - 2017-12-19 20:10 +0100
          Re: LUKS password gets printed as stars tomas@tuxteam.de - 2017-12-19 21:10 +0100
          Re: LUKS password gets printed as stars Jonathan Dowland <jmtd@debian.org> - 2017-12-19 22:50 +0100
            Re: LUKS password gets printed as stars root kea <rootkea@gmail.com> - 2017-12-20 12:10 +0100
              Re: LUKS password gets printed as stars Curt <curty@free.fr> - 2017-12-20 14:10 +0100
                Re: LUKS password gets printed as stars Richard Hector <richard@walnut.gen.nz> - 2017-12-20 23:40 +0100
                Re: LUKS password gets printed as stars Curt <curty@free.fr> - 2017-12-21 10:20 +0100
                Re: LUKS password gets printed as stars Richard Hector <richard@walnut.gen.nz> - 2017-12-22 22:30 +0100
                Re: LUKS password gets printed as stars Brian <ad44@cityscape.co.uk> - 2017-12-23 00:00 +0100
                Re: LUKS password gets printed as stars Anders Andersson <pipatron@gmail.com> - 2017-12-23 14:00 +0100
                Re: LUKS password gets printed as stars Hans <hans.ullrich@loop.de> - 2017-12-23 14:40 +0100
                Re: LUKS password gets printed as stars Curt <curty@free.fr> - 2017-12-23 16:20 +0100
                strawman [was: LUKS password gets printed as stars] <tomas@tuxteam.de> - 2017-12-23 19:10 +0100
                Re: strawman [was: LUKS password gets printed as stars] Brian <ad44@cityscape.co.uk> - 2017-12-23 20:50 +0100
                Re: LUKS password gets printed as stars <tomas@tuxteam.de> - 2017-12-21 11:50 +0100
                Re: LUKS password gets printed as stars Curt <curty@free.fr> - 2017-12-21 12:10 +0100
          Re: LUKS password gets printed as stars Don Armstrong <don@debian.org> - 2017-12-19 23:10 +0100
            Re: LUKS password gets printed as stars <tomas@tuxteam.de> - 2017-12-20 08:50 +0100
              Re: LUKS password gets printed as stars Curt <curty@free.fr> - 2017-12-20 12:00 +0100
                Re: LUKS password gets printed as stars <tomas@tuxteam.de> - 2017-12-20 12:40 +0100

csiph-web