Re: Password entropy

[Jimmy Kuo <cjkuo () VERIZON NET>]

Lately, I've been touting keyboard patterns.

In the face of this discussion on password entropy, I note that keyboard
patterns are NOT that secure IF you devise a cracker that understands
entropy in terms of keyboard patterns.

So the question would be, 1) do the password crackers understand keyboard
patterns?  2) If they do, doesn't that throw a couple bits into the entropy
of a standard phrase since you can't just rely on the rules of English any
more?

Thanks.

Jimmy

PS.  If anyone can point me to papers that have already been written about
the pros and cons of keyboard patterns, I'd appreciate it.