Re: Newbie question on encryption keys

On Sat, 14 Jul 2007 07:52:45 +0200, Ertugrul Soeylemez wrote:

If the attacker does not know your password pattern (i.e. whether,
where and how often you repeat), then the new password will be more
secure, but not as secure as a random 16 character password (since
the attacker might try guessing against repetition patterns).

Yes, and this is the crux of the question, I suppose. Is checking for
repetition a common approach in password unveiling. It would seem
logical that it is since this would be a simple way to more easily
remember 16+ character passwords. Maybe not, maybe that's too tough of
an algorithmic equation.

Maybe I would do this implicitly, by changing the order of passphrases
to match against. Considering that a rather small percentage of people
use repetition, I wouldn't do this explicitly.

Regards,
Ertugrul Söylemez.

I would think that repetition is more common than that.
.

Relevant Pages

  • Re: Newbie question on encryption keys
    ... secure, but not as secure as a random 16 character password (since ... the attacker might try guessing against repetition patterns). ... which makes things in your life stay as ...
    (comp.security.misc)
  • Re: How secure is your password?
    ... Interestingly, because of this, a 7 character password is arguably more ... secure than a 12 character password, because the last 5 characters of the 12 ... The other thing is that it only takes one vulnerable password in the SAM to ... It is a very rare network that has absolutely zero ...
    (comp.security.misc)