Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Recommendations in choosing a password #497

Closed
PhantomArt opened this issue Jun 16, 2022 · 1 comment
Closed

Recommendations in choosing a password #497

PhantomArt opened this issue Jun 16, 2022 · 1 comment

Comments

@PhantomArt
Copy link

What are the recommendations in choosing a password for Crypto::encryptWithPassword(), which will eliminate the expediency of brute force when compromising an encrypted file? Suppose the password consists of a set of printed characters of ASCII. What will be the safe minimum length?

@defuse
Copy link
Owner

defuse commented Jun 19, 2023

The password gets hashed with 100,000 iterations of PBKDF2 which slows down brute-force attacks somewhat, but for good security I'd recommend having at least around 80 bits of entropy in the password, e.g. at least 13 actually-random printable ASCII characters, more is better.

@defuse defuse closed this as completed Jun 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants