Security Basics mailing list archives

XP password and encryption


From: "J. Yoon" <supercool9000 () hotmail com>
Date: Mon, 05 Jan 2004 16:00:34 -0500

I have heard that any password less than 15 characters is worthless on NTLM because it's in reality just two 7 char passwds. If cracking a 7 char passwd only takes a couple of hours (say 10 hours avg on a tip-top PC), then cracking a 14 char passwd (which is just TWO 7 char passwds) will take only twice which is about 20 hours...

1) Does this mean that even if I use a 21 char password I am still wasting my time since it will only take 3 times the 7-char , which is 30 hours or so? I was always under the impression that each additional character increases the encryption in a non-linear way... but maybe I was wrong.

2) From your expert opinion, how many characters should our passwords on XP box be in order for us to keep our sanity AND still rest at ease being secure enough for most everday purposes?

3) Is there any way to strengthen the encryption so that even when someone gets access to my keyfile they won't be able to crack it any time soon (for a whole entire month or even upto a year on a 4 Gigahertz Processor) ?

3a) Is this possible within the existing Win XP Pro / Win2000 architecture?

3b) do Linux versions such as Mandrake or Suse support such crazy-strength encryption?

_________________________________________________________________
Check your PC for viruses with the FREE McAfee online computer scan. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963


---------------------------------------------------------------------------
Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any course! All of our class sizes are guaranteed to be 10 students or less. We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention, and many other technical hands on courses. Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off any course! ----------------------------------------------------------------------------


Current thread: