New answers tagged entropy
2
As Tom Leek correctly noted, entropy is a property of the generation process; it's not a property of any particular passphrase generated by the process.
What's minimal length for one word? Is 4 chars sufficient? How to
compute entropy for a 4 letter word?
When you pull 15 bits from a random number generator, and use those bits to uniformly select one ...
0
If English is not your mother tongue,you are lucky. I would suggest using a passphrase that uses a combination of English words with words from your native language or languages. Such a password will be quite difficult to guess.
Of course you should choose a passphrase that can be remembered easily by you.I am not a big fan of creating too complex ...
-1
I have a long password I use which I can type in from memory each time which I created by remembering a specific zig-zag path across the keyboard, one which passes through letters, numbers, and symbols, and then tapping out the keys that make up that path in the rhythm of a drum pattern from a favorite post-dubstep track of mine, shifting some of the ...
3
There are a lot of things wrong here, but to answer your question; no, there is no problem with calling serialize(); on user-submitted data. The only problem is what you then do with the output.
Your entropy gathering essentially boils down to: microtime() which will give you about 12 bits of entropy given typical TCP latency noise to a remote server, ...
Top 50 recent answers are included
