Smartcard PIN may be shorter than passphrase?

2011-08-23 Thread David Tomaschik
Would it be reasonable to say that you may use a significantly smaller PIN for your smartcard than would be required of a passphrase, since the smartcard locks itself after 3 tries? Since I don't use a reader with a pinpad, I must type my PIN in, and thus have about 8 alpha-numeric characters for

Re: Smartcard PIN may be shorter than passphrase?

2011-08-23 Thread Werner Koch
On Tue, 23 Aug 2011 15:12, da...@systemoverlord.com said: Would it be reasonable to say that you may use a significantly smaller PIN for your smartcard than would be required of a passphrase, since the smartcard locks itself after 3 tries? Yes. It is up to 6 tries because an attacker may also

Re: Smartcard PIN may be shorter than passphrase?

2011-08-23 Thread David Tomaschik
On Tue, Aug 23, 2011 at 9:56 AM, Werner Koch w...@gnupg.org wrote: On Tue, 23 Aug 2011 15:12, da...@systemoverlord.com said: Would it be reasonable to say that you may use a significantly smaller PIN for your smartcard than would be required of a passphrase, since the smartcard locks itself

Re: Smartcard PIN may be shorter than passphrase?

2011-08-23 Thread Grant Olson
On 8/23/11 12:43 PM, David Tomaschik wrote: So even a 4-digit PIN would ensure a less than 1% chance of guessing the PIN. (Assuming that the user does not select obvious pins like birthdates, anniversaries, etc.) At 8 digits, the probability becomes something like 6*10^-8, if I do the