13:06 Excelcalculator is a real strength of your password | |
Well-known consultant on corporate security, Roger Grimes said that he was tired of constantly explaining during the presentation the basic factors that affect the security of the password policy, adopted in the organization. He constantly explains why eight characters long enough for strong passwords, and what other factors may help the attacker to efficiently find the password. To simplify your task and to demonstrate the weakness of the secondary password policies, Grimes was Excel-spreadsheet (ZIP), which took into account all the factors: the range of valid characters that the password length, number of cases per minute, which may try an attacker, the maximum number of days to change your password, model entropy. This calculator shows how many days on average require an attacker to guess the password for the given conditions, how much exists at all possible combinations and how many of them are real (with real entropy). For example, in the default example with 94 characters and password length of 8 characters in the NIST-entropy of the theoretically possible number of passwords than 6 quadrillion, but the number of possible passwords based assumptions about the real entropy - total 16.8 million for breaking a protection for the allowable number of days should be able to set the speed of selection of 64.7 passwords per minute. In my opinion, this is the first calculator, which calculates not theoretical, and practical speed hack password protection. | |
|
Total comments: 0 | |