[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: strawman [was: LUKS password gets printed as stars]



On Sat 23 Dec 2017 at 18:43:38 +0100, tomas@tuxteam.de wrote:

> On Sat, Dec 23, 2017 at 03:14:25PM +0000, Curt wrote:
> > On 2017-12-23, Hans <hans.ullrich@loop.de> wrote:
> 
> [...]
> 
> > > And I suppose, guessing 15 digits will cause a loooooong time [...]
> 
> > (Assuming all 95 printable ascii characters) link to % time savings:
> 
> [...]
> 
> >  An interesting mathematical quirk about this ratio of the number of passwords
> >  shorter than n [...]
> 
> It's interesting how threads among us geeks can be totally derailed
> by a simple strawman (i.e. no-stars >= stars "because of security"),
> while the OP's motivation was rather "familiarity" (at least (s)he
> didn't say anything about security), which in itself is legitimate
> enough.
> 
> And watch this thread wander off to the woods on whether no-stars
> is more secure than stars, and whether significantly so.
> 
> Fascinating :-)

Motivation is in

 http://lists.alioth.debian.org/pipermail/pkg-systemd-maintainers/2017-December/016347.html

  There are mainly 2 reasons behind this proposal:
  1. Security by obscurity (hiding the length of pass-phrase)
  2. consistency

-- 
Brian.


Reply to: