[go: nahoru, domu]

Skip to content

Explaining how different passwords are weaker/stronger depending on attack-models

License

Notifications You must be signed in to change notification settings

Rudxain/password-strength-types

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 

Repository files navigation

PWST

Brute-Force

seq-size seq-chars

Guesses passwords of increasing lengths, testing codepoints in an ordered manner (typically increasing).

examples:

  • "aa" is weaker than "zz"
  • "aaa" is stronger than "zz"
  • "🔒" is stronger than "aa"
  • "🔒" is weaker than "zzzz"

Fixed-size, seq-chars

Same as above, but the attacker assumes the password has a given length.

examples:

  • "0" is infinitely strong, if assumed size isn't 1.
  • "a" repeated n times, grows in strength exponentially, if assumed size matches n.
  • "aaa" is weaker in this model when compared to the previous one (if assumed size 3), as smaller passwords will never be checked.

About

Explaining how different passwords are weaker/stronger depending on attack-models

Topics

Resources

License

Stars

Watchers

Forks