Timeline for Password entropy much lower than entropy of encryption keys. Why is this acceptable?
Current License: CC BY-SA 3.0
13 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 23, 2019 at 16:25 | answer | added | David Leppik | timeline score: 0 | |
| Mar 15, 2017 at 14:37 | comment | added | Mac | @Aydin: If EACH symbol in an 8-symbol password had an equal likelihood of being selected from a pool of 94 total symbols, then the entropy of each symbol in the set would be 6.5545 bits, and the resultant entropy of the password would be 52.4367 bits. But, people don't create random passwords very well at all, so Shannon determined that symbol entropy is actually closer to 1.3 bits each--nowhere near 6.5. So a "human" password of complexity 94^8 would really have an entropy of about 10.4 bits--nowhere near 52. The takeaway: entropy trumps complexity. | |
| Jun 11, 2016 at 20:37 | comment | added | Armadillo Jim | Check out "correct horse battery staple" at XKCD. | |
| Jun 7, 2016 at 17:45 | comment | added | Minaj | If each of these passwords is considered to be equally likely, the entropy formulation should boil down to log2(N) where N is the number of possibilities. Could I be wrong? I stand to be corrected. | |
| Jun 7, 2016 at 17:29 | comment | added | Aydin K. | "This translates to about 94^8 possible passwords, which means about 52 bits of entropy." hmm.. How did you calculate this? | |
| Jun 7, 2016 at 7:53 | comment | added | dandavis | passwords used online can't be guessed a million times a second like a captured ciphertext can. | |
| Jun 6, 2016 at 4:20 | vote | accept | Minaj | ||
| Jun 5, 2016 at 11:12 | comment | added | kasperd | Personally I use a password with 130 bits of entropy. And I have noticed how even people who people who usually wouldn't be considered very intellectual are still able to memorize facts which have way more than 130 bits of entropy. So the apparent inability to memorize strong passwords from what I have seen seem to be more tied to willingness to spend time memorizing and how it is presented, rather than not being able to retain 130 bits of entropy. | |
| Jun 5, 2016 at 9:17 | answer | added | RocketNuts | timeline score: 5 | |
| Jun 5, 2016 at 6:29 | history | tweeted | twitter.com/StackCrypto/status/739343328169349120 | ||
| Jun 5, 2016 at 5:39 | answer | added | otus | timeline score: 14 | |
| Jun 5, 2016 at 5:20 | history | edited | otus | CC BY-SA 3.0 |
added 2 characters in body; edited tags
|
| Jun 5, 2016 at 3:02 | history | asked | Minaj | CC BY-SA 3.0 |