Re:NULL license plate not such a bright idea
by DCoder on Tuesday August 13, 2019 @12:37AM
(#20682871)
> the keepass entropy estimate presumably […] tries
KeePass sources are available [0], you can see the specific algorithms it uses in [1].
[0]: https://sourceforge.net/projects/keepass/files/KeePass%202.x...
[1]: https://fossies.org/windows/misc/KeePass-2.42.1-Source.zip/K...
Re:NULL license plate not such a bright idea
by FabHK on Wednesday August 14, 2019 @08:46AM
(#20694931)
Thanks. I've looked at the code, and it does not seem to try to estimate the empirical distribution (doesn't appear to be using dictionaries, for examples).
Then the discrepancy maybe comes from the number of glyphs within certain categories, or their repetition?
In theory, "68703649" and "12345678" are equally likely to be pulled from the hat, but in practice one is a much better password than the other. You can reduce the search space by trying the passwords with higher (empirical) probability first.