Re: RIP and key destruction



Mike wrote:
....
safe!

It strikes me that an easy to remember password would be far more secure as it wouldn't get written down.

*exactly*

A few years ago I encrypted various documents (pdf/excel etc) using my
log on password which I regard as secure *and* memorable. I then ran
commercially available cracking tools (from elcomsoft) on these
documents and none of them were cracked over a period of a couple of
weeks using a bunch of 1GHz Pentium 3's

It was a good soak test for the hardware while I was away on holiday
:)



Way back when, I used to work with the IT dept to crack my company's users' passwords (I had a distributed version of Crack up and running on a network of 60 or so Sun machines) to check they were reasonably secure.

I /knew/ my own was good - a combination of badly mis-spelled words plus symbols. Trouble was, a [trusted!] colleague ran my code against my password - but using a German dictionary; he got it in a couple of hours, because my mis-spellings together constituted a single German word. Definitely an egg-on-face job :-)

So you never can be /really/ sure -- unless you use a truly random string.


--
Mike Scott (unet <at> scottsonline.org.uk)
Harlow Essex England
.



Relevant Pages

  • Re: TZ arrived today
    ... that new pin excitement is hard to beat. ... I'd like to thank Mike for the fantastic job he did packaging the ... closed the garage door to secure it and got ready for ...
    (rec.games.pinball)
  • Re: Which Firewall?
    ... > Mike wrote: ... Apologies but you missed my point. ... Administrator to do everyday tasks. ... On all but the most secure, ...
    (comp.security.firewalls)
  • Re: How to Shut the Mouths of the WinDupes
    ... Mike wrote: ... it is secure by virtue of it's obscurity. ... Use proper spelling and no one will say anything. ...
    (comp.sys.mac.advocacy)
  • Re: How to Shut the Mouths of the WinDupes
    ... Mike wrote: ... it is secure by virtue of it's obscurity. ... Use proper spelling and no one will say anything. ...
    (comp.sys.mac.advocacy)
  • Re: Please test this encryption
    ... > Problem is why would I invest the time into analyzing your half-with ... Is your design faster than AES, ... More secure? ... Aren't you the guy that said if I gave you plain text you could crack ...
    (sci.crypt)