CDR: Re: Is kerberos broken?

[Sampo A Syreeni]

On Sat, 2 Sep 2000, BENHAM TIMOTHY JAMES wrote:

>A human can easily remember 26 random letters from a 32 character 
>alphabet with a little mnemonic method (eg map each character to a 
>word so that it makes up some sort of dumb story). 5*26==130 which
>is more bits than computers can currently exhaust over.

True, especially if you salt with a suitably long random number and combine
the two with a sufficiently nasty serial computation.

Most of this thread does not, despite the strong wordings, actually 
concentrate on what average people *can* do but what they are likely to do
when they do not have any real reason/incentive to guard their privacy.

Sampo Syreeni <decoy at iki.fi>, aka decoy, student/math/Helsinki university