Receive new posts as email.
RSS 0.91 | RSS 2.0
RDF | Atom
Podcast only feed (RSS 2.0 format)
Get an RSS reader
Get a Podcast receiver
| Sun | Mon | Tues | Wed | Thurs | Fri | Sat |
|---|---|---|---|---|---|---|
| 1 | 2 | 3 | 4 | 5 | 6 | |
| 7 | 8 | 9 | 10 | 11 | 12 | 13 |
| 14 | 15 | 16 | 17 | 18 | 19 | 20 |
| 21 | 22 | 23 | 24 | 25 | 26 | 27 |
| 28 | 29 | 30 | 31 |
This site operates as an independent editorial operation. Advertising, sponsorships, and other non-editorial materials represent the opinions and messages of their respective origins, and not of the site operator or JiWire, Inc.
Entire site and all contents except otherwise noted © Copyright 2001-2006 by Glenn Fleishman. Some images ©2006 Jupiterimages Corporation. All rights reserved. Please contact us for reprint rights. Linking is, of course, free and encouraged.
Powered by
Movable Type
« Voice in the Air Debuts in...2007 | Main | Who's Hot Today? Burbank (Calif.), Anaheim (Calif.), Lexington (Ky.), Mountain View (Calif.) »
George Ou pointed out a few days ago that a good key could be seven characters long: He argues that there’s sufficient entropy with just seven characters with A-Z, a-z, and 0-9—although WPA passphrases must be at least eight characters long. He also omits punctuation, which would add more fuzz into the system for those trying to crack keys.
His approach is fundamentally consistent with Robert Moskowitz’s much linked-to paper on key weaknesses in WPA passphrase choice. In that Nov. 2003 paper, Moskowitz notes that dictionary-based short passphrases have a high degree of weakness, but that random values could be as short as 96 bits (which could be represented as 12 hex characters) and still be resistant to brute force attacks.
Posted by Glennf at November 16, 2005 3:24 PM
Categories: Security
TrackBack URL for this entry:
96 bits cannot be represented by six hex characters... One hex character (0-9A-F) is 4 bits, so 96 bits would be 24 hex characters or 12 bytes.
A 7 character string using only A-Za-z0-9 is the equivalent of about 42 bits.
Jacques.
[Editor's note: will fix in the main post -- thanks for the catch.--gf]
Posted by: Jacques Caron at November 17, 2005 12:42 AM