News for hackers. Stuff that matters.

A comment on MiniLock – File encryption software that does more with less. Parent comment

Re:MiniLock – File encryption software that does more with less by AgentME on Sunday July 20, 2014 @12:31AM (#8059583)
There's no difference between that and just requiring the user to use a longer password.

Anyone trying to attack the system will just program their cracker to be more likely to try concatenating words together awkwardly in the password somewhere.

[ Parent | on HN ]
Re:MiniLock – File encryption software that does more with less by sillysaurus3 on Sunday July 20, 2014 @12:37AM (#8059594)
It's easier for humans to remember two distinct passwords with individual complexity requirements than one gigantic passphrase.

By forcing the user to choose two passphrases which are then concatenated, the result is one gigantic passphrase that a cracker can't easily crack, yet is easy for humans to remember. It seems like this solves the problem of rainbow tables.

A keylogger could still break this system. But if an adversary has planted a keylogger, they could've simply stolen your keyfile.

[ Parent | on HN ]
Re:MiniLock – File encryption software that does more with less by MichaelGG on Sunday July 20, 2014 @02:33AM (#8059747)
I mean, you could just tell users to pick two sentences, if that's what you're after.
[ Parent | on HN ]