Re: brute forcing - numbers of passwords possible?



On 4 Gen, 13:31, bealoid <sig...@xxxxxxxxxxxxx> wrote:
A software allows a user password of up to 62 characters, selected from a
set of 95 characters.

Is the total number of different passwords given by:

62^95

or by:

62^95 + 61^95 + 60^95 . . . + 3^95 + 2^95 + 1^92

It's 95^62 + 95^61 + ... + 95^2 + 95^1 + 1 =
= sum_of(95^i)_for(i = 0 to 62) =
= (1 - 95^63) / (1 - 95)

And if it's the latter, is there an easier way to do it than the way I've
shown?

When talking about brute forcing such a password is it best to say "there
are X number of passwords possible", or "there are X possible passwords,
but you'd expect to break a password with brute force after Y tests"?

And what would Y be, about X/2?

Y = X / 2 if the passwords are chosen at random, with uniform
probability and independence bewteen the characters.

Thanks in advance for help.

.



Relevant Pages

  • Re: US Military bans HTML in emails
    ... Complex passwords are not that much harder to ... Consider a password with a choice of X different characters for each ... takes using all upper- and lowercase letters, ... I can see only two advantages of complex passwords: ...
    (comp.os.vms)
  • RE: Basic question
    ... If somebody else hasn't covered it already, I'll try to send out a Kerberos ... > Unicode character set and can be up to 128 characters long, ... > Pre-W2K user interfaces limits do not allow passwords to ... I believe that you are referring to *LM* hashes. ...
    (Focus-Microsoft)
  • Re: Paper & pencil password algorithm
    ... generator and generate a password as a permutation of a whole ... The advantage of a random sequence generator is that I can make my ... I can't imagine ever wanting passwords ... convenience I'll probably keep most of them between 20 and 50 characters ...
    (sci.crypt)
  • RE: Password statistics and standards
    ... If you shut off the storage of LM hashes, over 9 Characters will buy you ... Take a look at Perfect Passwords for some creative ideas: ... information about accounts which is helpful in telling me ... Norwich University ...
    (Security-Basics)
  • Re: US Military bans HTML in emails
    ... You mean like requiring 6-character passwords to now be "complex"? ... the need for non-alpha characters. ... I've seen passwords with zeros for O's and 3's for E's. ... What hacker ever think of that? ...
    (comp.os.vms)