Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #202362

Re: Password policy.

From Reco <recoverym4n@enotuniq.net>
Newsgroups linux.debian.user
Subject Re: Password policy.
Date 2018-11-13 18:30 +0100
Message-ID <wTKFH-2gO-3@gated-at.bofh.it> (permalink)
References <wTKml-29w-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


	Hi.

On Tue, Nov 13, 2018 at 08:23:13AM -0800, peter@easthope.ca wrote:
> Hi, 
> 
> https://www.debian.org/doc/manuals/debian-reference/ch04.en.html#_good_password
> specifies "6 to 8 characters".  Is that adequate against currently available brute force?

$ hashcat --session 6to8 -m1800 /tmp/hash -a3 ?a?a?a?a?a?a

hashcat (v4.2.1) starting...

OpenCL Platform #1: NVIDIA Corporation
======================================
* Device #1: GeForce GTX 1060 3GB, 753/3013 MB allocatable, 9MCU

...

Session..........: 6to8
Status...........: Running
Hash.Type........: sha512crypt $6$, SHA512 (Unix)
Hash.Target......: $6$...
...
Time.Estimated...: Tue Aug 11 17:56:28 2020 (1 year, 271 days)
Guess.Mask.......: ?a?a?a?a?a?a [6]

$ hashcat --session 6to8 -m1800 /tmp/hash -a3 ?a?a?a?a?a?a?a?a

...

Session..........: 6to8
Status...........: Running
Hash.Type........: sha512crypt $6$, SHA512 (Unix)
Hash.Target......: $6$...
...
Time.Estimated...: Next Big Bang (15988 years, 0 days)
Guess.Mask.......: ?a?a?a?a?a?a?a?a [8]


So, 6 characters is somewhat low (that GPU is outdated by today's
standards). 8 characters seem ok.

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Password policy. peter@easthope.ca - 2018-11-13 18:10 +0100
  Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 18:30 +0100
  Re: Password policy. Gene Heskett <gheskett@shentel.net> - 2018-11-13 18:50 +0100
    Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 20:10 +0100
      Re: Password policy. Gene Heskett <gheskett@shentel.net> - 2018-11-13 22:50 +0100
        Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-14 05:40 +0100
    Re: Password policy. peter@easthope.ca - 2018-11-13 21:00 +0100
      Re: Password policy. Dan Ritter <dsr@randomstring.org> - 2018-11-13 21:10 +0100
      Re (2): Password policy. peter@easthope.ca - 2018-11-13 22:20 +0100
        Re: Re (2): Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-14 05:40 +0100
  Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-13 19:20 +0100
  Re: Password policy. Jude DaShiell <jdashiel@panix.com> - 2018-11-13 19:40 +0100
    Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 20:10 +0100
      Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-13 21:20 +0100
        Re: Password policy. peter@easthope.ca - 2018-11-14 03:40 +0100
  Re: Password policy. peter@easthope.ca - 2018-11-14 04:10 +0100
    Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 10:50 +0100
      Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 11:30 +0100
        Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 11:40 +0100
          Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 12:30 +0100
            Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 12:30 +0100
              Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 13:20 +0100
                Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 15:30 +0100
                Re: Password policy. Brad Rogers <brad@fineby.me.uk> - 2018-11-14 16:50 +0100
          Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 12:30 +0100
        Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 12:20 +0100
          Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 15:40 +0100
            Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 17:00 +0100
              Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 17:50 +0100
                Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 21:30 +0100
              Re: Password policy. Richard Hector <richard@walnut.gen.nz> - 2018-11-15 01:10 +0100

csiph-web