Re: Re: Is kerberos broken?

[Sampo A Syreeni]

On Fri, 1 Sep 2000, petro wrote:

   Of course, a *simple* substitution of one word (or even 
spaces) would make this *much* harder.

As I said, people on this list hardly have a problem with dictionary
attacks.

   "Friends, Romulans, fellow countrymen, lend me your beers..."

   (I probably buthered the hell out of that, never having heard 
or read the original, but I think it gets the point across)

Wasn't that your whole point? ;)

Sampo Syreeni [EMAIL PROTECTED], aka decoy, student/math/Helsinki university

RE: Re: Is kerberos broken?

[Minow, Martin]

Title: RE: Re: Is kerberos broken?





Bill Stewart [mailto:[EMAIL PROTECTED]] writes:
Typical estimates for the entropy of English text are 1 bit/character;
I'd expect most alphabet-based human languages are similar.


However, a good strategy is to use a phrase as a memory aid, but
construct the password from, say, the first letter of each word.
For example, if you use Gilbert and Sullivan as your guide,
The flowers that bloom in the spring, tra la la. have nothing
to do with the case. becomes Tftbits,tll,hntdwtc


I rather doubt that your local script-kiddie will break that
password. (ps: I don't use this or anything similar.)


Martin Minow
[EMAIL PROTECTED]