31–33 of 33 posts
Earlier quoted context omitted.
You realise that a 10 word Diceware passphrase is significantly stronger than a 10 character (alphanumeric + specials) password, right? 95^10 = 5.9873694e+19 7776^10 = 8.0828128e+38
Yeah and both are weaker than a truly random private key, I give up, it's only money after all.
How much computing power is needed to attack a 7 word Diceware passphrase?
This actually misses the worst problem. Brain wallets are essentially unsalted. You can build a gigantic rainbow table once and then watch those addresses forever after. And you aren't attacking a single address at a time. You're attacking them all in parallel. Even if the expected time to crack one password is very long, the expected time to crack some password can be much, much smaller.
>This actually misses the worst problem. Brain wallets are essentially unsalted. You can build a gigantic rainbow table once and then watch those addresses forever after. The phrases generated by passphra.se have 44 bits of entropy. That means your rainbow table has to be on the order of hundreds of petabytes. I have doubts that the attack you're proposing could be implemented in practice. If it were a problem, you c…
Earlier quoted context omitted.
>This actually misses the worst problem. Brain wallets are essentially unsalted. You can build a gigantic rainbow table once and then watch those addresses forever after. The phrases generated by passphra.se have 44 bits of entropy. That means your rainbow table has to be on the order of hundreds of petabytes. I have doubts that the attack you're proposing could be implemented in practice. If it were a problem, you c…
Yes, but I'm highly confident that a significant fraction of users are not using passphra.se or similar. They're making something up, and humans are extremely bad at generating high entropy that way.