Re:Visualizing hex bytes with Unicode emoji
by michaelmior on Thursday October 30, 2014 @06:32AM
(#8532173)
Knowing minor differences is likely to be unimportant. This really only matters if an attacker is able to generate a key with almost the same fingerprint. AFAIK, there is no way to do this. I do agree though that the string of emoji is still hard to memorize.
[ Parent
| on HN ]
Re:Visualizing hex bytes with Unicode emoji
by acqq on Thursday October 30, 2014 @06:36AM
(#8532182)
Almostness reduces the brute-forcing effort. It's not something to be hand-waved, programming to bruteforce just until it's "good enough" is easy. Once somebody learns that he doesn't have to carefully check the signature he won't check at all. The goal is to have as little to check as reasonable, but to check thoroughly.
Re:Visualizing hex bytes with Unicode emoji
by michaelmior on Thursday October 30, 2014 @08:36AM
(#8532550)
Agreed that this reduces the effort, but I'll believe it's easy when I see it :) In any case, I think OpenSSH randomart is likely to be more effective than the emoji approach.