Boston Linux & UNIX was originally founded in 1994 as part of The Boston Computer Society. We meet on the third Wednesday of each month, online, via Jitsi Meet.

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] deadmanish login?



On Thu, Feb 2, 2017 at 4:38 PM, Richard Pieri <richard.pieri at gmail.com> wrote:
> On 2/2/2017 2:51 PM, Kent Borg wrote:
>> Does have 40-bits of entropy, that is.
>
> Not really:
> https://www.schneier.com/blog/archives/2014/03/choosing_secure_1.html

Yes really.  IF the word selection is based on a random
process.   Schneier is correct that if a human selects (either you personally or
by quoting from another source then you lose entropy.   If you are just writing
down a 40 bit random number by encoding it into words, there is no problem
(modulo offline vs. online attacks).


Bill Bogstad



BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org