Doesnt the english language consist of 500,000-1,000,000 words?
Re:Bitcointalk Server Compromised
by TheLoneWolfling on Sunday May 24, 2015 @07:17PM
(#9597969)
Yes. But most of them are far too close to each other to remember easily. Or relatively not used words.
It's (generally) easier to just use a longer passphrase and a shorter wordlist of only relatively common words.
Also, he's being (very) conservative. In other words, he's assuming a very fast password cracker. Roughly speaking, he has a wordlist of ~8070 words, which works out to ~13 bits of entropy / word. Which implies at 3My to crack 7 words he's assuming ~26 trillion (!) password hashes per second.
That's potentially realistic if you're using a fast hash - but you should be using something that's slow (and memory-constrained) for a password hash.