[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Password

At 02:18 PM 11/15/00 -0700, Ron Chmara wrote:
>An easy password can be broken in minutes to hours. A complex password
>(say, 25 random characters) may take days to years.

Please note that the exhaustive search of the key space
of a traditional UNIX crypt(3) password can generally be
obtained in less than a day on a modern computer.  This
is due to restrictions upon the key space (password length,
characters allowed, etc.) and the algorithm used (which
is DES based, but handicapped in a number of ways).

I have two points to make:
  1) use a stronger password scheme such as {SSHA}
  2) protect values as if they were clear text passwords

Kurt