1
vote
1answer
28 views

Minimum SHA256'd UTF8 encoded passphrase length not stored anywhere

For a passphrase that is UTF8 encoded and then SHA256'd, what is the minimum length to achieve a practically collision free result? The implementation is for a 32 byte cryptocurrency ed25519 seed ...
1
vote
0answers
101 views

Passphrase generator and strength & recovery time estimator. Right strength and randomness?

Questions about the strength of pass phrases frequently popup, as does: how to generate a strong passphrase? I tried to combine both in a tool. The free tool also includes recovery time estimations ...
3
votes
2answers
245 views

Computing entropy for a passphrase ( minimal word length … )

Edit: 2013-05-17 . 2013-05-27 After reading first answer from Tom Leek and some docs around the web, I've begin to write some options to my tool genpassphrase.pl: $ ./genpassphrase.pl -h Usage: ...
-2
votes
6answers
569 views

Are passwords made up from concatenating a few foreign words better than shorter random characters?

Does it make sense to insert a foreign word into a paraphrase to mitigate against brute force? For example: "pussiMeansCatInEskimo" "caballoMeansHorse" "CatIsGatto" "SalopeMeansBitch" ...
9
votes
1answer
3k views

Can a dictionary attack crack a Diceware passphrase?

Everyone knows the words used in Diceware passwords (all 6^5 = 7776 words are published) -- they're all common words. Everyone seems to know that we're not supposed to use dictionary words for ...
5
votes
2answers
714 views

How should I make diceware passphrases more memorable?

I find that truly random diceware passphrase, more often than not, either contain a word that is easily misspelled or has an order that is illogical. I think there are three ways to make a diceware ...