|
|
 Up |
|
|
  |
Author: de_magnetede_magnete
Date: Dec 26, 2008 04:44
As you known the physical ssciences have a set of what one might call
universal constants. Example "c" the speed of light, that turn up on
manay places. As far as I can understand these constants are useful as
a means of deciding whether a proposed theory or construction might be
correct. For example, A theory of electomagnetism might show that "c'"
is a consequence of the theory.
Now I wondered if cryptographic/information theory had such univeral
constants that can eb used in a similar manner. that is constants that
one might look derivable from a new proposal, in order to add weight
to the correctess of the new idea.
For example: might a deivation of an entropy of 2.58 have any
significance?
Does a probability of an event of 2/3 ~= 0.65 have any universal
significance?
Does a value of 0.38 when measuring the number of say the bits
matching between Item 1 and item two have any universal signifiicance?
Do you generally see what I mean by my question?
I mean the derivation of such universal constants from a proposal
would be of great use in theory validation?
|
| Show full article (1.23Kb) |
|
| |
no comments
|
|
|
Author: NiharikaNiharika
Date: Dec 26, 2008 02:29
Hi,
If you have an aspiration to work in USA and thought the only way to
do that was H1 then this is the mail will greatly help you where you
can fulfill your dream!!!
We file H1 visa for IT candidates having...
|
| Show full article (2.21Kb) |
|
| |
no comments
|
|
|
Author:
Date: Dec 25, 2008 16:32
earlcolby.pottinger@sympatico.ca wrote:
>
>On Dec 23, 2:51 pm, "Legatus" nospam.com> wrote:
>>> I very much doubt that. The entropy may be low but the keyspace
>> is still the same.
>
>The keyspace maybe the same, but if the attacker knows that the
>password is in English and worse the length of the password they can
>attack just using a large dictionary of English words. 100,000 words
>would cover 95%% of the possible combinations used by average Joe and
>Janes worldwide. Worse, there are about only about four to five
>million words total in the English language. If the length is known
>it would be very easy to run thru all the possible matching
>combinations.
...and it wouldn't be all that hard to write a program that
tries all common obfuscation techniques, such as reverse
spelling, C for K / K for C, 2 for "two", adding a number
at the end, etc.
|
| Show full article (1.20Kb) |
|
1 Comment |
|
|
Author:
Date: Dec 25, 2008 16:24
Legatus wrote:
>
>Joseph Ashwood wrote...
>
>> A typical English ASCII password has under 4 bits of entropy per
>> character, a 12 character password will give you 16^12 possible passwords.
>> This is about 3 Gigahertz*days, a single Intel Core i7 computer can expect
>> to find the password in 6 hours to one week. This is undoubtedly weak.
>
>I very much doubt that.
It's true whether you doubt it or not.
>The entropy may be low but the keyspace is still the same.
That just means that an attacker will guess passwords
(16^12 / 2^48 bits) rather than keys (2^128 or 2^256 bits.)
Consider the case of someone using AES-256 encryption with
a one-character alphanumeric password. Will an attacker try
all 2^256 posible keys will he try the 36 possible passwords?
|
| Show full article (0.83Kb) |
|
no comments
|
|
|
Author:
Date: Dec 25, 2008 16:13
Joseph Ashwood wrote:
> wrote...
>
>> Dear all,
>> I protect some important data (invoice, prices, list of clients, etc.)
>> on my laptop with Truecrypt, which is working really well
>> but now ... I wonder...
|
| Show full article (2.59Kb) |
|
no comments
|
|
|
Author: SaulSaul
Date: Dec 25, 2008 15:14
Regardless of Darya Gunchenko's next adventure in life, people on the
net will still talk about her.
--
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
Gadget.zip: Const. Jason Watson #1898, Cst. JASON WATSON #1898, Jason
Watson Peel Regional Police Vice Unit, Const. Sean Gormley...
|
| Show full article (2.27Kb) |
|
no comments
|
|
|
Author:
Date: Dec 25, 2008 02:02
soldsoldi@yahoo.it writes:
> I protect some important data (invoice, prices, list of clients, etc.)
> on my laptop with Truecrypt, which is working really well
> but now ... I wonder how secure they are, that is :
>
> with 10-12 char passwords, how long would it take to a competitor to
> decrypt a volume ?
If the passwords are regular english (or italian or whatever) words,
then guessing them will be very fast and 10-12 chars is way too short.
Use a much longer phrase, like 6 or so words chosen randomly from a
dictionary (see www.diceware.com for how to do this). The important
thing is that the words are random, not chosen by someone in a
guessable way.
|
| |
|
1 Comment |
|
|
Author: 1PW1PW
Date: Dec 25, 2008 01:02
On 12/23/2008 04:46 AM, soldsoldi@yahoo.it sent:
> Dear all,
> I protect some important data (invoice, prices, list of clients, etc.)
> on my laptop with Truecrypt, which is working really well
> but now ... I wonder how secure they are, that is :
>
> with 10-12 char passwords, how long would it take to a competitor to
> decrypt a volume ?
>
>
> Thank you so much
Some of the posts in this thread are *truly* interesting in an academic
sense. However, the OP's question may not have been satisfactorily
answered. Without stealing this thread, please allow me to restate
the OP's question with a /bit/ more precision for a real world reply:
|
| Show full article (2.01Kb) |
|
no comments
|
|
|
Author:
Date: Dec 24, 2008 22:33
Phil Carmody yahoo.co.uk> writes:>> think the answer is that there are some AICPA (American Institute of
>> Certified Public Accountants, www.aicpa.org) standards about how CA's >
> At this point I ask myself "do I trust the AICPA?".
> Immediately I answer "Who?". Which makes it a "no" by default.
I have looked into it a little bit further, it looks like the AICPA
publishes audit guidelines and Mozilla accepts audits from other
organizations that follow them, e.g. I see that the Comodo operation
was audited by KPMG (hmm...).
>> I'd be interested to know whether Windows has the same certs in its
>> root store, used by MSIE and Chrome.
>
> It would indeed be interesting to see which CA's are in which
> browser/OS by default. I have a nasty feeling it might be a feature
> which they compete over - "we've got over 100", "we've got nearly 200".
It is probably about the same set in Firefox and MSIE. There is a
fairly open process about getting a cert into Firefox. Maybe not
ideal, but seems pretty reasonable given Mozilla's nonprofit nature:
|
| Show full article (1.40Kb) |
|
no comments
|
|
|
|
|
|
Author: kand2002kand2002
Date: Dec 24, 2008 21:16
I'm looking for a good book to read on quality engineering. Any
suggestion? Thanks
|
| |
|
1 Comment |
|
|
|
|
