News for hackers. Stuff that matters.
Re:TrueCrypt Security Assessment [pdf] by MichaelGG on Monday April 14, 2014 @04:56PM (#7588879)
>doesn't mean we can use a password 1/1000th as long

It'd never work that way, right? You get to use a password with log2(1000) bits less. So e.g. if you use 2^24 iterations, and figure 80 bits is strong enough, then you can use a 56-bit password.

Re:TrueCrypt Security Assessment [pdf] by amalcon on Monday April 14, 2014 @05:32PM (#7589093)
You're right; it would only be a fixed (and not especially large) length reduction.