Re: Cost of a brute force attack

From: Kev (kev_at_novercia.f9.co.uk)
Date: 10/03/04


Date: 3 Oct 2004 14:48:27 -0700

jaf <jaffy1229@yahoo.co.uk> wrote in message news:<h58tl01hu6udui5mdqun92aimckrd23nf8@4ax.com>...
> Hi,
>
> I was wondering how much it would cost to brute force 256bit Blowfish
> encryption?

That 256-bit key used by Blowfish might simply be the SHA-256 hash of
a password with only 60 bits of entropy. If you can brute force the
pre-hash password/passphrase, it makes no difference whether the
post-hash key is 128, 256, or 448 bits - it could still fall to a
brute force attack.

But anyone that serious about breaking your 256-bit Blowfish won't
bother with brute force. An in-situ side-channel attack such as memory
sniffing is much more likely to yield results, and won't cost the
earth either.



Relevant Pages

  • Re: Should I trigger events to show a UI total of a list of items?
    ... allows you to edit its delivery date and cost. ... Thus I have an Order object and a Product object and have created Presenters ... I could have something in my UI to force a recalculate when an edit occurs, ... This is quite brute force and just seems ...
    (comp.lang.smalltalk.dolphin)
  • Should I trigger events to show a UI total of a list of items?
    ... In my UI, you can click on one of the products in the list, and a sub pane allows you to edit its delivery date and cost. ... However I have now hit the bit where after editing the cost of an item which is correctly stored in the Order, my total is not updating. ... orders add: anItem. ... This is quite brute force and just seems sort of ugly somehow. ...
    (comp.lang.smalltalk.dolphin)
  • Re: Hidden Encryption
    ... what encryption method is being used and apply a particular brute force ... Or will the same brute force attack method ... within this primary container, there is a hidden container, would a ...
    (sci.crypt)
  • Re: Cost of a brute force attack
    ... >I was wondering how much it would cost to brute force 256bit Blowfish ... It may be possible to crack it, but if that is done, it will certainly be by ... a crack of blowfish by a method faster than ...
    (sci.crypt)
  • Re: FAQ: How can I generate good strong passwords?
    ... >> brute-force algorithms are based in dictionary words ... A dictionary is a brute force in which the order of the attempts has ... is an example of a non-dictionary brute force attack. ...
    (comp.security.misc)

Quantcast